Filtered by vendor Whoopsie Project Subscriptions
Filtered by product Whoopsie Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-15570 1 Whoopsie Project 1 Whoopsie 2024-11-21 5.5 Medium
The parse_report() function in whoopsie.c in Whoopsie through 0.2.69 mishandles memory allocation failures, which allows an attacker to cause a denial of service via a malformed crash file.
CVE-2020-12135 2 Mongodb, Whoopsie Project 2 C Driver, Whoopsie 2024-11-21 5.5 Medium
bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values. In particular, the bson_ensure_space() parameter bytesNeeded could have an integer overflow via properly constructed bson input.
CVE-2019-11484 2 Canonical, Whoopsie Project 2 Ubuntu Linux, Whoopsie 2024-11-21 6.3 Medium
Kevin Backhouse discovered an integer overflow in bson_ensure_space, as used in whoopsie.