Lucene search

CVE-2024-5629 Out-of-bounds read in bson module of PyMongo

🗓️ 05 Jun 2024 14:56:32Reported by mongodbType

Out-of-bounds read in PyMongo bson module

Reporter	Title	Published	Views	Family All 33
Tenable Nessus	Debian dla-3889 : python-pymongo-doc - security update	16 Sep 202400:00	–	nessus
Tenable Nessus	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : PyMongo vulnerability (USN-6904-1)	22 Jul 202400:00	–	nessus
Tenable Nessus	PyMongo < 4.6.3 Out-of-bounds Read	11 Apr 202400:00	–	nessus
Tenable Nessus	Debian dla-3832 : python-bson - security update	17 Jun 202400:00	–	nessus
Debian CVE	CVE-2024-5629	5 Jun 202415:15	–	debiancve
CVE	CVE-2024-5629	5 Jun 202415:15	–	cve
CVE	CVE-2024-21506	6 Apr 202405:15	–	cve
MongoDB	Out-of-bounds read in bson module of PyMongo	5 Jun 202414:32	–	mongodb
Github Security Blog	PyMongo Out-of-bounds Read in the bson module	5 Jun 202415:30	–	github
Github Security Blog	Taipy 3.1.1 affected by CVEs on flask-core and pymongo	27 Aug 202419:50	–	github

[
  {
    "cpes": [
      "cpe:2.3:a:mongodb:python_driver:0.4:pre:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.5:pre:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.5.1:pre:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.5.2:pre:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.5.3:pre:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.6:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.7:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.7.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.7.2:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.8:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.8.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.9:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.9.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.9.2:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.9.3:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.9.4:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.9.5:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.10.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.10.2:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.10.3:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.11:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.11.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.11.2:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.11.3:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.12:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.13:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.14:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.14.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.14.2:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.15:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.15.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.15.2:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:0.16:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:1.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:1.1.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:1.1.2:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:1.2:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:1.2.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:1.3:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:1.4:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:1.5:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:1.5.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:1.5.2:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:1.6:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:1.7:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:1.8:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:1.8.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:1.9:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:1.10.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:1.11:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.0.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.1.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.2:-:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.2:rc1:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.2.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.3:-:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.3:rc1:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.4:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.4.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.4.2:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.5:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.5.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.5.2:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.6:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.6.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.6.2:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.6.3:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.7:-:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.7:rc0:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.7:rc1:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.7.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.7.2:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.8:-:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.8:rc0:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.8:rc1:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.8:rc2:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.8.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.9:-:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.9:rc0:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.9.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.9.2:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.9.3:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.9.4:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:2.9.5:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3:-:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3:b0:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3:b1:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3:rc0:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3:rc1:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.0.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.0.2:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.0.3:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.1:-:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.1:rc0:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.1.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.2:-:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.2:rc0:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.2.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.2.2:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.3.0:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.3.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.4:rc0:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.4.0:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.5.0:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.5.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.6:rc0:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.6.0:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.6.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.7.0:-:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.7.0:b0:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.7.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.7.2:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.8.0:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.9.0:-:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.9.0:b0:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.9.0:b1:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.10.0:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.10.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.11.0:-:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.11.0:b0:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.11.0:b1:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.11.0:rc0:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.11.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.11.2:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.11.3:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.11.4:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.12.0:b0:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.12.0:b1:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.12.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.12.2:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.12.3:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:3.13.0:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:4.0.0:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:4.0.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:4.0.2:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:4.1.0:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:4.1.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:4.2.0:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:4.3.2:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:4.3.3:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:4.4.0:b0:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:4.4.0:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:4.4.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:4.5.0:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:4.6.0:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:4.6.1:*:*:*:*:mongodb:*:*",
      "cpe:2.3:a:mongodb:python_driver:4.6.2:*:*:*:*:mongodb:*:*"
    ],
    "defaultStatus": "unaffected",
    "product": "PyMongo",
    "vendor": "MongoDB Inc",
    "versions": [
      {
        "lessThanOrEqual": "4.6.2",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2024/06/msg00007.html
jira	www.jira.mongodb.org/browse/PYTHON-4305

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

05 Jun 2024 14:32Current

4.6Medium risk

Vulners AI Score4.6

EPSS0.001

CWE-125