Patch Ticker

MongoDB Atlas SQL ODBC Driver out-of-bounds write

Programs connecting to a database can suddenly crash.

Summary

The MongoDB Atlas SQL ODBC Driver writes past a fixed-size target when it retrieves certain database values. A database user with basic write privileges can use this to make the application using the driver terminate unexpectedly.

What to do

Check that you run a driver newer than 3.0.1, and read the vendor's advisory.

Products and platforms

  • Windows
  • macOS
  • Linux
  • MongoDB Atlas SQL ODBC Driver

CVE IDs

Times

First published

First seen