OESA-2024-1880

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1880

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2024-1880.json

JSON Data

https://api.test.osv.dev/v1/vulns/OESA-2024-1880

Upstream

CVE-2024-6383

Published

2024-07-19T11:08:35Z

Modified

2025-08-12T05:47:48.671252Z

Summary

mongo-c-driver security update

Details

mongo-c-driver is a project that includes two libraries: libmongoc, a client library written in C for MongoDB. libbson, a library providing useful routines related to building, parsing, and iterating BSON documents.

Security Fix(es):

The bsonstringappend function in MongoDB C Driver may be vulnerable to a buffer overflow where the function might attempt to allocate too small of buffer and may lead to memory corruption of neighbouring heap memory. This issue affects libbson versions prior to 1.27.1(CVE-2024-6383)

Database specific

{
    "severity": "Medium"
}

References

Affected packages

openEuler:22.03-LTS-SP3 / mongo-c-driver

Package

Name: mongo-c-driver
Purl: pkg:rpm/openEuler/mongo-c-driver&distro=openEuler-22.03-LTS-SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.27.4-1.oe2203sp3

Ecosystem specific

{
    "src": [
        "mongo-c-driver-1.27.4-1.oe2203sp3.src.rpm"
    ],
    "aarch64": [
        "libbson-1.27.4-1.oe2203sp3.aarch64.rpm",
        "libbson-devel-1.27.4-1.oe2203sp3.aarch64.rpm",
        "mongo-c-driver-1.27.4-1.oe2203sp3.aarch64.rpm",
        "mongo-c-driver-debuginfo-1.27.4-1.oe2203sp3.aarch64.rpm",
        "mongo-c-driver-debugsource-1.27.4-1.oe2203sp3.aarch64.rpm",
        "mongo-c-driver-devel-1.27.4-1.oe2203sp3.aarch64.rpm",
        "mongo-c-driver-help-1.27.4-1.oe2203sp3.aarch64.rpm"
    ],
    "x86_64": [
        "libbson-1.27.4-1.oe2203sp3.x86_64.rpm",
        "libbson-devel-1.27.4-1.oe2203sp3.x86_64.rpm",
        "mongo-c-driver-1.27.4-1.oe2203sp3.x86_64.rpm",
        "mongo-c-driver-debuginfo-1.27.4-1.oe2203sp3.x86_64.rpm",
        "mongo-c-driver-debugsource-1.27.4-1.oe2203sp3.x86_64.rpm",
        "mongo-c-driver-devel-1.27.4-1.oe2203sp3.x86_64.rpm",
        "mongo-c-driver-help-1.27.4-1.oe2203sp3.x86_64.rpm"
    ]
}

openEuler:20.03-LTS-SP4 / mongo-c-driver

Package

Name: mongo-c-driver
Purl: pkg:rpm/openEuler/mongo-c-driver&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.27.4-1.oe2003sp4

Ecosystem specific

{
    "src": [
        "mongo-c-driver-1.27.4-1.oe2003sp4.src.rpm"
    ],
    "aarch64": [
        "libbson-1.27.4-1.oe2003sp4.aarch64.rpm",
        "libbson-devel-1.27.4-1.oe2003sp4.aarch64.rpm",
        "mongo-c-driver-1.27.4-1.oe2003sp4.aarch64.rpm",
        "mongo-c-driver-debuginfo-1.27.4-1.oe2003sp4.aarch64.rpm",
        "mongo-c-driver-debugsource-1.27.4-1.oe2003sp4.aarch64.rpm",
        "mongo-c-driver-devel-1.27.4-1.oe2003sp4.aarch64.rpm",
        "mongo-c-driver-help-1.27.4-1.oe2003sp4.aarch64.rpm"
    ],
    "x86_64": [
        "libbson-1.27.4-1.oe2003sp4.x86_64.rpm",
        "libbson-devel-1.27.4-1.oe2003sp4.x86_64.rpm",
        "mongo-c-driver-1.27.4-1.oe2003sp4.x86_64.rpm",
        "mongo-c-driver-debuginfo-1.27.4-1.oe2003sp4.x86_64.rpm",
        "mongo-c-driver-debugsource-1.27.4-1.oe2003sp4.x86_64.rpm",
        "mongo-c-driver-devel-1.27.4-1.oe2003sp4.x86_64.rpm",
        "mongo-c-driver-help-1.27.4-1.oe2003sp4.x86_64.rpm"
    ]
}

openEuler:24.03-LTS / mongo-c-driver

Package

Name: mongo-c-driver
Purl: pkg:rpm/openEuler/mongo-c-driver&distro=openEuler-24.03-LTS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.27.4-1.oe2403

Ecosystem specific

{
    "src": [
        "mongo-c-driver-1.27.4-1.oe2403.src.rpm"
    ],
    "aarch64": [
        "libbson-1.27.4-1.oe2403.aarch64.rpm",
        "libbson-devel-1.27.4-1.oe2403.aarch64.rpm",
        "mongo-c-driver-1.27.4-1.oe2403.aarch64.rpm",
        "mongo-c-driver-debuginfo-1.27.4-1.oe2403.aarch64.rpm",
        "mongo-c-driver-debugsource-1.27.4-1.oe2403.aarch64.rpm",
        "mongo-c-driver-devel-1.27.4-1.oe2403.aarch64.rpm",
        "mongo-c-driver-help-1.27.4-1.oe2403.aarch64.rpm"
    ],
    "x86_64": [
        "libbson-1.27.4-1.oe2403.x86_64.rpm",
        "libbson-devel-1.27.4-1.oe2403.x86_64.rpm",
        "mongo-c-driver-1.27.4-1.oe2403.x86_64.rpm",
        "mongo-c-driver-debuginfo-1.27.4-1.oe2403.x86_64.rpm",
        "mongo-c-driver-debugsource-1.27.4-1.oe2403.x86_64.rpm",
        "mongo-c-driver-devel-1.27.4-1.oe2403.x86_64.rpm",
        "mongo-c-driver-help-1.27.4-1.oe2403.x86_64.rpm"
    ]
}

openEuler:22.03-LTS-SP4 / mongo-c-driver

Package

Name: mongo-c-driver
Purl: pkg:rpm/openEuler/mongo-c-driver&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.27.4-1.oe2203sp4

Ecosystem specific

{
    "src": [
        "mongo-c-driver-1.27.4-1.oe2203sp4.src.rpm"
    ],
    "aarch64": [
        "libbson-1.27.4-1.oe2203sp4.aarch64.rpm",
        "libbson-devel-1.27.4-1.oe2203sp4.aarch64.rpm",
        "mongo-c-driver-1.27.4-1.oe2203sp4.aarch64.rpm",
        "mongo-c-driver-debuginfo-1.27.4-1.oe2203sp4.aarch64.rpm",
        "mongo-c-driver-debugsource-1.27.4-1.oe2203sp4.aarch64.rpm",
        "mongo-c-driver-devel-1.27.4-1.oe2203sp4.aarch64.rpm",
        "mongo-c-driver-help-1.27.4-1.oe2203sp4.aarch64.rpm"
    ],
    "x86_64": [
        "libbson-1.27.4-1.oe2203sp4.x86_64.rpm",
        "libbson-devel-1.27.4-1.oe2203sp4.x86_64.rpm",
        "mongo-c-driver-1.27.4-1.oe2203sp4.x86_64.rpm",
        "mongo-c-driver-debuginfo-1.27.4-1.oe2203sp4.x86_64.rpm",
        "mongo-c-driver-debugsource-1.27.4-1.oe2203sp4.x86_64.rpm",
        "mongo-c-driver-devel-1.27.4-1.oe2203sp4.x86_64.rpm",
        "mongo-c-driver-help-1.27.4-1.oe2203sp4.x86_64.rpm"
    ]
}

openEuler:22.03-LTS-SP1 / mongo-c-driver

Package

Name: mongo-c-driver
Purl: pkg:rpm/openEuler/mongo-c-driver&distro=openEuler-22.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.27.4-1.oe2203sp1

Ecosystem specific

{
    "src": [
        "mongo-c-driver-1.27.4-1.oe2203sp1.src.rpm"
    ],
    "aarch64": [
        "libbson-1.27.4-1.oe2203sp1.aarch64.rpm",
        "libbson-devel-1.27.4-1.oe2203sp1.aarch64.rpm",
        "mongo-c-driver-1.27.4-1.oe2203sp1.aarch64.rpm",
        "mongo-c-driver-debuginfo-1.27.4-1.oe2203sp1.aarch64.rpm",
        "mongo-c-driver-debugsource-1.27.4-1.oe2203sp1.aarch64.rpm",
        "mongo-c-driver-devel-1.27.4-1.oe2203sp1.aarch64.rpm",
        "mongo-c-driver-help-1.27.4-1.oe2203sp1.aarch64.rpm"
    ],
    "x86_64": [
        "libbson-1.27.4-1.oe2203sp1.x86_64.rpm",
        "libbson-devel-1.27.4-1.oe2203sp1.x86_64.rpm",
        "mongo-c-driver-1.27.4-1.oe2203sp1.x86_64.rpm",
        "mongo-c-driver-debuginfo-1.27.4-1.oe2203sp1.x86_64.rpm",
        "mongo-c-driver-debugsource-1.27.4-1.oe2203sp1.x86_64.rpm",
        "mongo-c-driver-devel-1.27.4-1.oe2203sp1.x86_64.rpm",
        "mongo-c-driver-help-1.27.4-1.oe2203sp1.x86_64.rpm"
    ]
}