Kevin Backhouse discovered an integer overflow in bsonensurespace, as used in whoopsie.

Last updated 24 July 2024

In whoopsie, parsereport() from whoopsie.c allows a local attacker to cause a denial of service via a crafted file. The DoS is caused by resource exhaustion due to a memory leak. Fixed in 0.2.52.5ubuntu0.5, 0.2.62ubuntu0.5 and 0.2.69ubuntu0.1.

bson before 0.8 incorrectly uses int rather than sizet for many variables, parameters, and return values. In particular, the bsonensurespace() parameter bytesNeeded could have an integer overflow via properly constructed bson input.