Description

bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to decoding of an "invalid DBRef."

Remediation

References

CVE-2013-2132

Related Vulnerabilities

TYPO3 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-3946)

IBM WebSEAL 7PK - Security Features Vulnerability (CVE-2016-3025)

Liferay DXP CVE-2021-38266 Vulnerability (CVE-2021-38266)

Ruby Double Free Vulnerability (CVE-2022-28738)

WordPress 4.8.x Multiple Vulnerabilities (4.8 - 4.8.17)

Severity

Medium

Classification

CVE-2013-2132

Tags

Missing Update Known Vulnerabilities