The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The bson_string_append function in MongoDB C Driver may be vulnerable to a buffer overflow where the function might attempt to allocate too small of buffer and may lead to memory corruption of neighbouring heap memory. This issue affects libbson versions prior to 1.27.1
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libbson-xs-perlUpgrade mongo-c-driver | May 12, 2025 | Jul 3, 2024 |
| Ubuntu | — | Upgrade libbson-dev (Ubuntu Pro)Upgrade libmongoc-dev (Ubuntu Pro)Upgrade libbson-1.0-0 (Ubuntu Pro)Upgrade libbson-1.0-0t64 (Ubuntu Pro)Upgrade libmongoc-1.0-0 (Ubuntu Pro)Upgrade libmongoc-1.0-0t64 (Ubuntu Pro) | Jun 26, 2025 | Jul 3, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub