CVE-2023-0437CWE-835

MongoDB client C Driver may infinitely loop when validating certain BSON input data

Medium · published January 12, 2024

CVSS v3.1
5.3
EPSS
1%
Percentile
65.5
In the wild
Unconfirmed
What it is

When calling bson_utf8_validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01103 · 65.5th percentile
Weakness
CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')
Published
2024-01-12T13:33Z
EPSS history
Timeline
  • 12 JAN 13:33Z
    MongoDB client C Driver may infinitely loop when validating certain BSON input data
    cvelistv5