BI Connector ODBC Driver vulnerabilities
7 known vulnerabilities in BI Connector ODBC Driver from MongoDB. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.1 High severity
BI Connector ODBC Driver: Stack-based Buffer Overflow
An application using the MongoDB BI Connector ODBC Driver may encounter a memory-safety issue when a submitted SQL statement contains an unusually long run of digits following a LIMIT clause. The issue occurs only on connections where the driver's optional pre
- 8.8 High severity
BI Connector ODBC Driver: Stack-based Buffer Overflow
A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver can supply a positioned-cursor statement whose cursor name exceeds the size of an internal fixed-length buffer. Because the name length is not bounded before the dr
- 7.8 High severity
BI Connector ODBC Driver: Stack-based Buffer Overflow
A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setup dialog to write outside the bounds of an allocated buffer. The issue stems from an incorrect buffer capacity calculation in the dialog's f
- 8.1 High severity
BI Connector ODBC Driver: Heap-based Buffer Overflow
An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue when processing output parameters from a stored procedure. Triggering this issue requires connecting to an untrusted or impersonated database server that returns cra
- 8.1 High severity
BI Connector ODBC Driver: Buffer Copy without Checking Size of Input
A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Driver can result in an out-of-bounds write in the client application process. Triggering this issue requires control over the server the driver connects t
- 9.8 Critical severity
BI Connector ODBC Driver: Integer Overflow or Wraparound
The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application supplies an unusually long catalog, schema, or object name to a metadata retrieval function. This may result in memory corruption within the calling ap
- 7.8 High severity
BI Connector ODBC driver: Incorrect Default Permissions
Incorrect Default Permissions vulnerability in MongoDB BI Connector ODBC driver allows Privilege Escalation.This issue affects BI Connector ODBC driver: from 1.0.0 through 1.4.6.