CVE - CVE-2013-2132

CVE-ID
CVE-2013-2132	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to decoding of an "invalid DBRef."
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:60252 URL:http://www.securityfocus.com/bid/60252 MISC:93804 URL:~~http://www.osvdb.org/93804~~ (Obsolete source) MISC:DSA-2705 URL:http://www.debian.org/security/2013/dsa-2705 MISC:USN-1897-1 URL:http://ubuntu.com/usn/usn-1897-1 MISC:[oss-security] 20130531 Re: CVE-2013-2132 MongoDB: User-triggerable NULL pointer dereference due to utter plebbery URL:http://seclists.org/oss-sec/2013/q2/447 MISC:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=710597 URL:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=710597 MISC:https://github.com/mongodb/mongo-python-driver/commit/a060c15ef87e0f0e72974c7c0e57fe811bbd06a2 URL:https://github.com/mongodb/mongo-python-driver/commit/a060c15ef87e0f0e72974c7c0e57fe811bbd06a2 MISC:https://jira.mongodb.org/browse/PYTHON-532 URL:https://jira.mongodb.org/browse/PYTHON-532 MISC:openSUSE-SU-2013:1064 URL:http://lists.opensuse.org/opensuse-updates/2013-06/msg00180.html
Assigning CNA
Red Hat, Inc.
Date Record Created
20130219	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20130219)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)