← Back

CVE-2013-2132

nvd nist
Published: Aug 15, 2013Modified: Apr 29, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:N/I:N/A:P
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to decoding of an "invalid DBRef."

Affected (18)

Mongodb
1 product
Mongodb
Canonical
1 product
Ubuntu Linux
Opensuse
1 product
Opensuse
Configuration A
14 vulnerable
Vulnerable SoftwareAffected Versions
Mongodb
Mongodb
version ≤ 2.5.1
Mongodb
Version 1.2.0
Mongodb
Version 1.4.0
Mongodb
Version 1.6.0
Mongodb
Version 1.8.0
Mongodb
Version 2.0.0
Mongodb
Version 2.2.0
Mongodb
Version 2.4.0
Mongodb
Version 2.4.1
Mongodb
Version 2.4.2
Mongodb
Version 2.4.3
Mongodb
Version 2.4.4
Mongodb
Version 2.4.5
Mongodb
Version 2.5.0
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Ubuntu Linux
Version 12.04
Ubuntu Linux
Version 12.10
Ubuntu Linux
Version 13.04
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Opensuse
Version 12.3

References (18)

Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
ExploitPatch
Source: secalert@redhat.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatch
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.