FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-04-18 11:12:36 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
fd2e0ca8-e3ae-11e9-8af7-08002720423d	mongodb -- Bump Windows package dependencies Rich Mirch reports: An unprivileged user or program on Microsoft Windows which can create OpenSSL configuration files in a fixed location may cause utility programs shipped with MongoDB server versions less than 4.0.11, 3.6.14, and 3.4.22 to run attacker defined code as the user running the utility. Discovery 2019-08-06 Entry 2019-09-30 mongodb34 < 3.4.22 mongodb36 < 3.6.14 mongodb40 < 4.0.11 CVE-2019-2390 https://jira.mongodb.org/browse/SERVER-42233

VuXML ID

Description

fd2e0ca8-e3ae-11e9-8af7-08002720423d

mongodb -- Bump Windows package dependencies

Rich Mirch reports:

An unprivileged user or program on Microsoft Windows which can create OpenSSL configuration files in a fixed location may cause utility programs shipped with MongoDB server versions less than 4.0.11, 3.6.14, and 3.4.22 to run attacker defined code as the user running the utility.

Discovery 2019-08-06
Entry 2019-09-30
mongodb34

< 3.4.22

mongodb36

< 3.6.14

mongodb40

< 4.0.11

CVE-2019-2390
https://jira.mongodb.org/browse/SERVER-42233