In whoopsie, parsereport() from whoopsie.c allows a local attacker to cause a denial of service via a crafted file. The DoS is caused by resource exhaustion due to a memory leak. Fixed in 0.2.52.5ubuntu0.5, 0.2.62ubuntu0.5 and 0.2.69ubuntu0.1.

Last updated 24 July 2024

bson before 0.8 incorrectly uses int rather than sizet for many variables, parameters, and return values. In particular, the bsonensurespace() parameter bytesNeeded could have an integer overflow via properly constructed bson input.

Kevin Backhouse discovered an integer overflow in bsonensurespace, as used in whoopsie.