CVE-2013-2132
CVE-2013-2132
This page contains facts from public vulnerability sources. Check the original advisory before updating.
bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to decoding of an "invalid DBRef."
EPSS 4.1% · Fix available
- Published
- Updated
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
pymongo Debian:12
- Affected ranges
- ECOSYSTEM: < 2.5.2-1
Update to 2.5.2-1
pymongo Debian:13
- Affected ranges
- ECOSYSTEM: < 2.5.2-1
Update to 2.5.2-1
pymongo Debian:14
- Affected ranges
- ECOSYSTEM: < 2.5.2-1
Update to 2.5.2-1
pymongo PyPI
- Versions
- 0.1.1pre
- 0.1.2pre
- 0.10
- 0.10.1
- 0.10.2
- 0.10.3
- 0.11
- 0.11.1
- 0.11.2
- 0.11.3
- 0.12
- 0.13
- 0.14
- 0.14.1
- 0.14.2
- 0.15
- 0.15.1
- 0.15.2
- 0.16
- 0.1pre
- 0.2pre
- 0.3.1pre
- 0.3pre
- 0.4pre
- 0.5.1pre
- 0.5.2pre
- 0.5.3pre
- 0.5pre
- 0.6
- 0.7
- 0.7.1
- 0.7.2
- 0.8
- 0.8.1
- 0.9
- 0.9.1
- 0.9.2
- 0.9.3
- 0.9.4
- 0.9.5
- 0.9.6
- 0.9.7
- 1.0
- 1.1
- 1.1.1
- 1.1.2
- 1.10
- 1.10.1
- 1.11
- 1.2
- 1.2.1
- 1.3
- 1.4
- 1.5
- 1.5.1
- 1.5.2
- 1.6
- 1.7
- 1.8
- 1.8.1
- 1.9
- 2.0
- 2.0.1
- 2.1
- 2.1.1
- 2.2
- 2.2.1
- 2.3
- 2.4
- 2.4.1
- 2.4.2
- 2.5
- 2.5.1
- Affected ranges
- ECOSYSTEM: < 2.5.2
Update to 2.5.2
pymongo PyPI
- Versions
- 0.1.1pre
- 0.1.2pre
- 0.10
- 0.10.1
- 0.10.2
- 0.10.3
- 0.11
- 0.11.1
- 0.11.2
- 0.11.3
- 0.12
- 0.13
- 0.14
- 0.14.1
- 0.14.2
- 0.15
- 0.15.1
- 0.15.2
- 0.16
- 0.1pre
- 0.2pre
- 0.3.1pre
- 0.3pre
- 0.4pre
- 0.5.1pre
- 0.5.2pre
- 0.5.3pre
- 0.5pre
- 0.6
- 0.7
- 0.7.1
- 0.7.2
- 0.8
- 0.8.1
- 0.9
- 0.9.1
- 0.9.2
- 0.9.3
- 0.9.4
- 0.9.5
- 0.9.6
- 0.9.7
- 1.0
- 1.1
- 1.1.1
- 1.1.2
- 1.10
- 1.10.1
- 1.11
- 1.2
- 1.2.1
- 1.3
- 1.4
- 1.5
- 1.5.1
- 1.5.2
- 1.6
- 1.7
- 1.8
- 1.8.1
- 1.9
- 2.0
- 2.0.1
- 2.1
- 2.1.1
- 2.2
- 2.2.1
- 2.3
- 2.4
- 2.4.1
- 2.4.2
- 2.5
- 2.5.1
- Affected ranges
- GIT: < a060c15ef87e0f0e72974c7c0e57fe811bbd06a2
- ECOSYSTEM: < 2.5.2
Update to 2.5.2
Original sources
- http://lists.opensuse.org/opensuse-updates/2013-06/msg00180.html
- http://ubuntu.com/usn/usn-1897-1
- http://www.osvdb.org/93804
- https://jira.mongodb.org/browse/PYTHON-532
- https://github.com/mongodb/mongo-python-driver/commit/a060c15ef87e0f0e72974c7c0e57fe811bbd06a2
- http://seclists.org/oss-sec/2013/q2/447
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=710597
- http://www.debian.org/security/2013/dsa-2705
- http://www.securityfocus.com/bid/60252
- https://nvd.nist.gov/vuln/detail/CVE-2013-2132