CVE-2025-0755

NameCVE-2025-0755
DescriptionThe various bson_append functions in the MongoDB C driver library may be susceptible to buffer overflow when performing operations that could result in a final BSON document which exceeds the maximum allowable size (INT32_MAX), resulting in a segmentation fault and possible application crash. This issue affected libbson versions prior to 1.27.5, MongoDB Server v8.0 versions prior to 8.0.1 and MongoDB Server v7.0 versions prior to 7.0.16
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDLA-4160-1, DLA-4175-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
libbson-xs-perl (PTS)bullseye0.8.4-1vulnerable
bullseye (security)0.8.4-1+deb11u1fixed
bookworm0.8.4-2+deb12u1fixed
mongo-c-driver (PTS)bullseye1.17.6-1vulnerable
bullseye (security)1.17.6-1+deb11u1fixed
bookworm1.23.1-1+deb12u1fixed
trixie1.30.3-1fixed
sid1.30.4-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
libbson-xs-perlsourcebullseye0.8.4-1+deb11u1DLA-4160-1
libbson-xs-perlsourcebookworm0.8.4-2+deb12u1
libbson-xs-perlsource(unstable)(unfixed)
mongo-c-driversourcebullseye1.17.6-1+deb11u1DLA-4175-1
mongo-c-driversourcebookworm1.23.1-1+deb12u1
mongo-c-driversource(unstable)1.27.5-1

Notes

https://jira.mongodb.org/browse/SERVER-94461
Fixed by: https://github.com/mongodb/mongo-c-driver/commit/63c3d6f70180f151ffd201376eb33793357e5418 (1.28.0)
Fixed by: https://github.com/mongodb/mongo-c-driver/commit/d3cdb626be30748b9360451023c75438ec346a38 (1.27.5)

Search for package or bug name: Reporting problems