Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2013-2132
HistoryAug 15, 2013 - 5:55 p.m.

CVE-2013-2132

2013-08-1517:55:24
[email protected]
web.nvd.nist.gov
74
cve-2013-2132
nvd
mongodb
pymongo
denial of service
null pointer
crash
security vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

7.3 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

82.2%

JSON

bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to decoding of an β€œinvalid DBRef.”

Affected configurations

NVD
Node
mongodbmongodbRange≀2.5.1
OR
mongodbmongodbMatch1.2.0
OR
mongodbmongodbMatch1.4.0
OR
mongodbmongodbMatch1.6.0
OR
mongodbmongodbMatch1.8.0
OR
mongodbmongodbMatch2.0.0
OR
mongodbmongodbMatch2.2.0
OR
mongodbmongodbMatch2.4.0
OR
mongodbmongodbMatch2.4.1
OR
mongodbmongodbMatch2.4.2
OR
mongodbmongodbMatch2.4.3
OR
mongodbmongodbMatch2.4.4
OR
mongodbmongodbMatch2.4.5
OR
mongodbmongodbMatch2.5.0
Node
canonicalubuntu_linuxMatch12.04-lts
OR
canonicalubuntu_linuxMatch12.10
OR
canonicalubuntu_linuxMatch13.04
Node
opensuseopensuseMatch12.3

Related

osv 3
openvas 5
cvelist 1
nessus 4
seebug 1
nvd 1
debiancve 1
debian 2
prion 1
ubuntu 1
ubuntucve 1
mageia 1
securityvulns 2
github 1
redhat 1
kitploit 1
n0where 1
osv
osv
PYSEC-2013-30
2013-08-15 17:55:00
Use of NullPointerException Catch to Detect NULL Pointer Dereference in Pymongo
2022-05-14 02:10:10
pymongo - denial of service
2013-06-10 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-2705-1)
2013-06-09 00:00:00
Mageia: Security Advisory (MGASA-2013-0201)
2022-01-28 00:00:00
Ubuntu Update for pymongo USN-1897-1
2013-07-05 00:00:00
cvelist
cvelist
CVE-2013-2132
2013-08-15 17:00:00
nessus
nessus
Debian DSA-2705-1 : pymongo - denial of service
2013-06-11 00:00:00
openSUSE Security Update : python-pymongo / python3-pymongo (openSUSE-SU-2013:1064-1)
2014-06-13 00:00:00
Ubuntu 12.04 LTS / 12.10 / 13.04 : pymongo vulnerability (USN-1897-1)
2013-07-05 00:00:00
seebug
seebug
MongoDB η©ΊζŒ‡ι’ˆεΌ•η”¨ζ‹’η»ζœεŠ‘ζΌζ΄ž(CVE-2013-2132)
2013-06-03 00:00:00
nvd
nvd
CVE-2013-2132
2013-08-15 17:55:24
debiancve
debiancve
CVE-2013-2132
2013-08-15 17:55:24
debian
debian
[SECURITY] [DSA 2705-1] pymongo security update
2013-06-10 17:02:56
[SECURITY] [DSA 2705-1] pymongo security update
2013-06-10 17:02:56
prion
prion
Null pointer dereference
2013-08-15 17:55:00
ubuntu
ubuntu
PyMongo vulnerability
2013-07-03 00:00:00
ubuntucve
ubuntucve
CVE-2013-2132
2013-06-03 00:00:00
mageia
mageia
Updated python-pymongo packages fix CVE-2013-2132
2013-07-06 18:14:28
securityvulns
securityvulns
pymongo DoS
2013-06-17 00:00:00
[SECURITY] [DSA 2705-1] pymongo security update
2013-06-17 00:00:00
github
github
Use of NullPointerException Catch to Detect NULL Pointer Dereference in Pymongo
2022-05-14 02:10:10
redhat
redhat
(RHSA-2013:1170) Important: mongodb and pymongo security and enhancement update
2013-08-21 00:00:00
kitploit
kitploit
mongoaudit - A Powerful MongoDB Auditing and Pentesting Tool
2017-02-22 14:04:00
n0where
n0where
MongoDB Security Audit: mongoaudit
2017-02-16 06:05:56

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

7.3 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

82.2%

JSON
Related for CVE-2013-2132
osv3openvas5cvelist1nessus4seebug1nvd1debiancve1debian2prion1ubuntu1ubuntucve1mageia1securityvulns2github1redhat1kitploit1n0where1