CVEs (3)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
The parse_report() function in whoopsie.c in Whoopsie through 0.2.69 mishandles memory allocation failures, which allows an attacker to cause a denial of service via a malformed crash file. |
2Mongodb Whoopsie Project2C Driver WhoopsieNov 21, 2024 Apr 24, 2020 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values. In particular, the bson_ensure_space() parameter bytesNeeded could have an integer overflow via properly construc...Show more |
2Canonical Whoopsie Project2Ubuntu Linux WhoopsieNov 21, 2024 Feb 8, 2020 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Kevin Backhouse discovered an integer overflow in bson_ensure_space, as used in whoopsie. |