Alerts This Week
Warning Icon 1 1,154
Alerts This Week
Warning Icon 1 1,154

Ubuntu 24.04 LTS USN-7613-1 critical: mongo-c-driver denial of service

ubuntu
Calendar Grey July 3, 2025
Dist Ubuntu Esm H88
Numerous vulnerabilities in mongo-c-driver demand immediate attention for those using Ubuntu. Mitigate risks now.
Several security issues were fixed in mongo-c-driver.

Summary

Several security issues were fixed in mongo-c-driver.

Software Description:

- mongo-c-driver: MongoDB driver for the C language

Details:

Karman Liu discovered that mongo-c-driver did not correctly handle certain

memory operations. An attacker could possibly use this issue to cause a

denial of service or execute arbitrary code. (CVE-2024-6381)

Karman Liu discovered that mongo-c-driver did not correctly handle certain

memory operations. An attacker could possibly use this issue to cause a

denial of service or execute arbitrary code. This issue only affected

Ubuntu 24.04 LTS. (CVE-2024-6383, CVE-2025-0755)

Topics%20covered

Topics Covered

security advisory denial of service critical arbitrary code execution ubuntu mongo-c-driver

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
  libbson-1.0-0t64                1.26.0-1.1ubuntu2+esm1
                                  Available with Ubuntu Pro
  libbson-dev                     1.26.0-1.1ubuntu2+esm1
                                  Available with Ubuntu Pro
  libmongoc-1.0-0t64              1.26.0-1.1ubuntu2+esm1
                                  Available with Ubuntu Pro
  libmongoc-dev                   1.26.0-1.1ubuntu2+esm1
                                  Available with Ubuntu Pro

Ubuntu 22.04 LTS
  libbson-1.0-0                   1.21.0-1ubuntu0.1~esm1
                                  Available with Ubuntu Pro
  libbson-dev                     1.21.0-1ubuntu0.1~esm1
                                  Available with Ubuntu Pro
  libmongoc-1.0-0                 1.21.0-1ubuntu0.1~esm1
                                  Available with Ubuntu Pro
  libmongoc-dev                   1.21.0-1ubuntu0.1~esm1
                                  Available with Ubuntu Pro

Ubuntu 20.04 LTS
  libbson-1.0-0                   1.16.1-1ubuntu0.1~esm1
                                  Available with Ubuntu Pro
  libbson-dev                     1.16.1-1ubuntu0.1~esm1
                                  Available with Ubuntu Pro
  libmongoc-1.0-0                 1.16.1-1ubuntu0.1~esm1
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-7613-1

CVE-2024-6381, CVE-2024-6383, CVE-2025-0755

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7613-1

Topics%20covered

Topics Covered

security advisory denial of service critical arbitrary code execution ubuntu mongo-c-driver

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here