The bson_string_append function in MongoDB C Driver may be vulnerable to a buffer overflow where the function might attempt to allocate too small of buffer and may lead to memory corruption of neighbouring heap memory. This issue affects libbson versions prior to 1.27.1
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
 Debian DLA |
DLA-4160-1 | libbson-xs-perl security update |
| Debian DLA |
DLA-4175-1 | mongo-c-driver security update |
 EUVD |
EUVD-2024-47490 | The bson_string_append function in MongoDB C Driver may be vulnerable to a buffer overflow where the function might attempt to allocate too small of buffer and may lead to memory corruption of neighbouring heap memory. This issue affects libbson versions prior to 1.27.1 |
 Ubuntu USN |
USN-7613-1 | mongo-c-driver vulnerabilities |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Tue, 04 Nov 2025 05:30:00 +0900
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Fri, 22 Nov 2024 21:00:00 +0900
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Sat, 05 Oct 2024 01:30:00 +0900
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: mongodb
Published:
Updated: 2025-11-03T19:34:31.467Z
Reserved: 2024-06-27T08:43:40.268Z
Link: CVE-2024-6383
Vulnrichment
Updated: 2024-10-04T15:02:53.248Z
NVD
Status : Awaiting Analysis
Published: 2024-07-03T22:15:03.240
Modified: 2025-11-03T20:17:03.463
Link: CVE-2024-6383
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses