netbird/FreeBSD-ports
0
0
Fork 0
mirror of https://github.com/netbirdio/FreeBSD-ports.git synced 2026-05-22 18:42:42 -07:00
Code Issues Packages Projects Releases Wiki Activity

security/vuxml: Add mongodb{78}0 vulnerability

Browse Source 
* CVE-2025-14847
This commit is contained in:
Fernando Apesteguía
2025-12-22 10:21:17 +01:00
parent 0fbce46b6f
commit b587cd0d69
1 changed files with 32 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
security/vuxml/vuln/2025.xml
+32
View File
@@ -1,3 +1,35 @@
<vuln vid="c1613867-df16-11f0-8870-b42e991fc52e">
<topic>MongoDB -- Improper Handling of Length Parameter Inconsistency</topic>
<affects>
<package>
<name>mongodb80</name>
<range><lt>8.2.3</lt></range>
</package>
<package>
<name>mongodb70</name>
<range><lt>7.0.28</lt></range>
</package>
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
<p>https://jira.mongodb.org/browse/SERVER-115508 reports:</p>
<blockquote cite="https://jira.mongodb.org/browse/SERVER-115508">
<p>Mismatched length fields in Zlib compressed protocol
headers may allow a read of uninitialized heap memory by an
unauthenticated client.</p>
</blockquote>
</body>
</description>
<references>
<cvename>CVE-2025-14847</cvename>
<url>https://cveawg.mitre.org/api/cve/CVE-2025-14847</url>
</references>
<dates>
<discovery>2025-12-19</discovery>
<entry>2025-12-22</entry>
</dates>
</vuln>
<vuln vid="dc7e30db-de67-11f0-b893-5404a68ad561">
<topic>traefik -- Inverted TLS Verification Logic in Kubernetes NGINX Provider</topic>
<affects>