TI-2019-08576 CVE-2019-11484 · GHSA-rwvc-6fhr-c2q7
Integer overflow in bson_ensure_space
Priority LOW 34
Kevin Backhouse discovered an integer overflow in bson_ensure_space, as used in whoopsie.
Whoopsie Project
Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Whoopsie Project records in CISA KEVNo Whoopsie Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
3 records
TI-2020-12248 CVE-2020-15570 · GHSA-rpfw-xcrg-7r3r
The parse_report() function in whoopsie.c in Whoopsie through 0.2.69 mishandles memory…
Priority LOW 27
The parse_report() function in whoopsie.c in Whoopsie through 0.2.69 mishandles memory allocation failures, which allows an attacker to cause a denial of service via a malformed crash file.
TI-2020-09768 CVE-2020-12135 · GHSA-f54q-h8mw-5h8w
bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters…
Priority LOW 27
bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values.