CyberRota Analysis
AI-GeneratedThe MongoDB BI Connector ODBC Driver is vulnerable due to a memory-safety issue triggered by excessively long digit sequences in SQL LIMIT clauses, particularly when the prefetch setting is enabled. This flaw can lead to unexpected application crashes or memory corruption, posing a significant risk to stability and data integrity. Organizations utilizing this driver, especially those with user-controlled SQL inputs, should prioritize addressing this vulnerability to mitigate potential disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An application using the MongoDB BI Connector ODBC Driver may encounter a memory-safety issue when a submitted SQL statement contains an unusually long run of digits following a LIMIT clause. The issue occurs only on connections where the driver's optional prefetch setting is enabled, and stems from the driver copying the digit sequence into a fixed-size internal buffer without checking its length. A user able to influence the numeric portion of a LIMIT clause could cause the hosting application process to terminate unexpectedly or corrupt adjacent memory in that process.
Related CVEs
Other vulnerabilities affecting the same vendor(s)