Bug 2548186 (CVE-2026-106428) - CVE-2026-106428 mongo-c-driver: mongo-c-driver: Denial of Service via malformed SCRAM authentication response
Summary: CVE-2026-106428 mongo-c-driver: mongo-c-driver: Denial of Service via malform...
Keywords:
Status: NEW
Alias: CVE-2026-106428
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2548582 2548583 2548584
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-10-08 19:03 UTC by OSIDB Bzimport
Modified: 2026-10-09 13:09 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-10-08 19:03:51 UTC 
An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed server-final message. A server or network intermediary able to provide this message before server-signature verification can cause the application using the driver to terminate. The extra byte is not returned through the protocol.
Note You need to log in before you can comment on or make changes to this bug.