← Back

Whoopsie

whoopsie

Vendor: Whoopsie Project • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Whoopsie Project
1Whoopsie
Nov 21, 2024
Jul 6, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The parse_report() function in whoopsie.c in Whoopsie through 0.2.69 mishandles memory allocation failures, which allows an attacker to cause a denial of service via a malformed crash file.
2Mongodb
Whoopsie Project
2C Driver
Whoopsie
Nov 21, 2024
Apr 24, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values. In particular, the bson_ensure_space() parameter bytesNeeded could have an integer overflow via properly construc...Show more
bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values. In particular, the bson_ensure_space() parameter bytesNeeded could have an integer overflow via properly constructed bson input.Show less
2Canonical
Whoopsie Project
2Ubuntu Linux
Whoopsie
Nov 21, 2024
Feb 8, 2020
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
Kevin Backhouse discovered an integer overflow in bson_ensure_space, as used in whoopsie.