Lucene search
MongoDBMONGODB:CVE-2024-5629HistoryJun 05, 2024 - 2:32 p.m.
Out-of-bounds read in bson module of PyMongo
2024-06-0514:32:00
www.mongodb.com
5
pymongo
out-of-bounds read
bson
deserialization
security vulnerability
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
AI Score
4.7
Confidence
High
EPSS
0.001
Percentile
37.2%
An out-of-bounds read in the ‘bson’ module of PyMongo 4.6.2 or earlier allows deserialization of malformed BSON provided by a Server to raise an exception which may contain arbitrary application memory.
References
Related
nessus
nessus
Debian dla-3889 : python-pymongo-doc - security update
2024-09-16 00:00:00
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : PyMongo vulnerability (USN-6904-1)
2024-07-22 00:00:00
PyMongo < 4.6.3 Out-of-bounds Read
2024-04-11 00:00:00
debiancve
debiancve
CVE-2024-5629
2024-06-05 15:15:12
cve
cve
CVE-2024-5629
2024-06-05 15:15:12
CVE-2024-21506
2024-04-06 05:15:07
github
github
PyMongo Out-of-bounds Read in the bson module
2024-06-05 15:30:39
PyMongo Out-of-bounds Read in the bson module
2024-04-06 06:31:08
Taipy 3.1.1 affected by CVEs on flask-core and pymongo
2024-08-27 19:50:54
redhatcve
redhatcve
CVE-2024-5629
2024-06-05 17:34:36
vulnrichment
vulnrichment
CVE-2024-5629 Out-of-bounds read in bson module of PyMongo
2024-06-05 14:32:56
openvas
openvas
Debian: Security Advisory (DLA-3889-1)
2024-09-17 00:00:00
Debian: Security Advisory (DLA-3832-1)
2024-07-01 00:00:00
Ubuntu: Security Advisory (USN-6904-1)
2024-07-23 00:00:00
redos
redos
ROS-20240611-01
2024-06-11 00:00:00
osv
osv
pymongo - security update
2024-06-17 00:00:00
CVE-2024-5629
2024-06-05 15:15:12
CGA-j75f-6qgr-x3rm
2024-06-06 12:28:04
cvelist
cvelist
CVE-2024-5629 Out-of-bounds read in bson module of PyMongo
2024-06-05 14:32:56
veracode
veracode
Out-of-bounds Read
2024-04-08 04:56:12
ubuntu
ubuntu
PyMongo vulnerability
2024-07-22 00:00:00
wolfi
wolfi
CVE-2024-5629 vulnerabilities
2024-09-27 09:13:12
nvd
nvd
CVE-2024-5629
2024-06-05 15:15:12
CVE-2024-21506
2024-04-06 05:15:07
ubuntucve
ubuntucve
CVE-2024-5629
2024-06-05 00:00:00
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
AI Score
4.7
Confidence
High
EPSS
0.001
Percentile
37.2%
Related for MONGODB:CVE-2024-5629