Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-2132
HistoryAug 15, 2013 - 5:55 p.m.

CVE-2013-2132

2013-08-1517:55:24
[email protected]
web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.1 Medium

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

82.2%

JSON

bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to decoding of an β€œinvalid DBRef.”

Affected configurations

NVD
Node
mongodbmongodbRange≀2.5.1
OR
mongodbmongodbMatch1.2.0
OR
mongodbmongodbMatch1.4.0
OR
mongodbmongodbMatch1.6.0
OR
mongodbmongodbMatch1.8.0
OR
mongodbmongodbMatch2.0.0
OR
mongodbmongodbMatch2.2.0
OR
mongodbmongodbMatch2.4.0
OR
mongodbmongodbMatch2.4.1
OR
mongodbmongodbMatch2.4.2
OR
mongodbmongodbMatch2.4.3
OR
mongodbmongodbMatch2.4.4
OR
mongodbmongodbMatch2.4.5
OR
mongodbmongodbMatch2.5.0
Node
canonicalubuntu_linuxMatch12.04-lts
OR
canonicalubuntu_linuxMatch12.10
OR
canonicalubuntu_linuxMatch13.04
Node
opensuseopensuseMatch12.3

Related

ubuntu 1
openvas 5
ubuntucve 1
mageia 1
securityvulns 2
github 1
debian 2
cve 1
osv 3
cvelist 1
nessus 4
seebug 1
debiancve 1
prion 1
redhat 1
kitploit 1
n0where 1
ubuntu
ubuntu
PyMongo vulnerability
2013-07-03 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-1897-1)
2013-07-05 00:00:00
Debian: Security Advisory (DSA-2705-1)
2013-06-09 00:00:00
Mageia: Security Advisory (MGASA-2013-0201)
2022-01-28 00:00:00
ubuntucve
ubuntucve
CVE-2013-2132
2013-06-03 00:00:00
mageia
mageia
Updated python-pymongo packages fix CVE-2013-2132
2013-07-06 18:14:28
securityvulns
securityvulns
pymongo DoS
2013-06-17 00:00:00
[SECURITY] [DSA 2705-1] pymongo security update
2013-06-17 00:00:00
github
github
Use of NullPointerException Catch to Detect NULL Pointer Dereference in Pymongo
2022-05-14 02:10:10
debian
debian
[SECURITY] [DSA 2705-1] pymongo security update
2013-06-10 17:02:56
[SECURITY] [DSA 2705-1] pymongo security update
2013-06-10 17:02:56
cve
cve
CVE-2013-2132
2013-08-15 17:55:24
osv
osv
PYSEC-2013-30
2013-08-15 17:55:00
Use of NullPointerException Catch to Detect NULL Pointer Dereference in Pymongo
2022-05-14 02:10:10
pymongo - denial of service
2013-06-10 00:00:00
cvelist
cvelist
CVE-2013-2132
2013-08-15 17:00:00
nessus
nessus
Debian DSA-2705-1 : pymongo - denial of service
2013-06-11 00:00:00
openSUSE Security Update : python-pymongo / python3-pymongo (openSUSE-SU-2013:1064-1)
2014-06-13 00:00:00
Ubuntu 12.04 LTS / 12.10 / 13.04 : pymongo vulnerability (USN-1897-1)
2013-07-05 00:00:00
seebug
seebug
MongoDB η©ΊζŒ‡ι’ˆεΌ•η”¨ζ‹’η»ζœεŠ‘ζΌζ΄ž(CVE-2013-2132)
2013-06-03 00:00:00
debiancve
debiancve
CVE-2013-2132
2013-08-15 17:55:24
prion
prion
Null pointer dereference
2013-08-15 17:55:00
redhat
redhat
(RHSA-2013:1170) Important: mongodb and pymongo security and enhancement update
2013-08-21 00:00:00
kitploit
kitploit
mongoaudit - A Powerful MongoDB Auditing and Pentesting Tool
2017-02-22 14:04:00
n0where
n0where
MongoDB Security Audit: mongoaudit
2017-02-16 06:05:56

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.1 Medium

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

82.2%

JSON
Related for NVD:CVE-2013-2132
ubuntu1openvas5ubuntucve1mageia1securityvulns2github1debian2cve1osv3cvelist1nessus4seebug1debiancve1prion1redhat1kitploit1n0where1