Description

bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to decoding of an "invalid DBRef."

Remediation

References

CVE-2013-2132

Related Vulnerabilities

MongoDb Improper Input Validation Vulnerability (CVE-2020-7925)

Oracle JRE CVE-2013-0430 Vulnerability (CVE-2013-0430)

Vulnerable package dependencies [medium]

MySQL CVE-2021-2201 Vulnerability (CVE-2021-2201)

WordPress Plugin YITH WooCommerce Compare Security Bypass (2.3.13)

Severity

Medium

Classification

CVE-2013-2132

Tags

Missing Update Known Vulnerabilities