CVE-2018-16790 - CERT CVE

  1. CVE-2018-16790

ID CVE-2018-16790
Sažetak _bson_iter_next_internal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a heap-based buffer over-read via a crafted bson buffer.
Reference
CVSS
Base: 5.8
Impact: 4.9
Exploitability:8.6
Pristup
VektorSloženostAutentikacija
NETWORK MEDIUM NONE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL NONE PARTIAL
CVSS vektor AV:N/AC:M/Au:N/C:P/I:N/A:P
Zadnje važnije ažuriranje 03-10-2019 - 00:03
Objavljeno 10-09-2018 - 05:29