| Package | Affected versions | Patched versions |
|---|---|---|
| bi connector odbc driver | < 1.4.10 | 1.4.10 |
An application using the MongoDB BI Connector ODBC Driver may encounter a memory-safety issue when a submitted SQL statement contains an unusually long run of digits following a LIMIT clause. The issue occurs only on connections where the driver's optional prefetch setting is enabled, and stems from the driver copying the digit sequence into a fixed-size internal buffer without checking its length. A user able to influence the numeric portion of a LIMIT clause could cause the hosting application process to terminate unexpectedly or corrupt adjacent memory in that process.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free