← Back

CVE-2012-6619

nvd nist
Published: Mar 6, 2014Modified: May 6, 2026

JSON object

Loading...
6.4
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:P
Exploitability: 10.0 / Impact: 4.9
Source: NVD

Description

The default configuration for MongoDB before 2.3.2 does not validate objects, which allows remote authenticated users to cause a denial of service (crash) or read system memory via a crafted BSON object in the column name in an insert command, which triggers a buffer over-read.

Affected (23)

Products: Mongodb: Mongodb
Mongodb
1 product
Mongodb
Configuration A
23 vulnerable
Vulnerable SoftwareAffected Versions
Mongodb
Mongodb
Up to 2.3.1
Mongodb
Version 1.2.0
Mongodb
Version 1.4.0
Mongodb
Version 1.6.0
Mongodb
Version 1.8.0
Mongodb
Version 2.0.0
Mongodb
Version 2.0.1
Mongodb
Version 2.0.2
Mongodb
Version 2.0.3
Mongodb
Version 2.0.4
Mongodb
Version 2.0.5
Mongodb
Version 2.0.6
Mongodb
Version 2.0.7
Mongodb
Version 2.0.8
Mongodb
Version 2.2.0
Mongodb
Version 2.2.1
Mongodb
Version 2.2.2
Mongodb
Version 2.2.3
Mongodb
Version 2.2.4
Mongodb
Version 2.2.5
Mongodb
Version 2.2.6
Mongodb
Version 2.2.7
Mongodb
Version 2.3.0

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (16)

Source: cve@mitre.org
Exploit
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
ExploitVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitVendor Advisory

Timeline

No history available yet.