CVE-2023-0437

Name of the Vulnerable Software and Affected Versions MongoDB C Driver versions prior to 1.25.0

Description The issue is related to the bson utf8 validate() function in the MongoDB C Driver, which can cause an infinite loop when called with certain inputs. This may allow a remote attacker to cause a denial of service.

Recommendations For MongoDB C Driver versions prior to 1.25.0, update to version 1.25.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the bson utf8 validate() function until a patch is available.