GHSA-CR6F-GF5W-VHRC PyMongo Out-of-bounds Read in the bson module

🗓️ 06 Apr 2024 06:31:08Reported by GoogleType

osv🔗 osv.dev👁 9 Views

Pymongo versions before 4.6.3 are vulnerable to out-of-bounds reads in the bson module, enabling deserialization of unmanaged memory.

Reporter	Title	Published	Views	Family All 38
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 1.14.4 IF001	14 May 202420:42	–	ibm
Tenable Nessus	Amazon Linux 2023 : python3-bson, python3-pymongo, python3-pymongo-gridfs (ALAS2023-2024-614)	13 May 202400:00	–	nessus
Tenable Nessus	SUSE SLES15 / openSUSE 15 Security Update : python-pymongo (SUSE-SU-2024:1571-1)	10 May 202400:00	–	nessus
Tenable Nessus	SUSE SLES15 / openSUSE 15 Security Update : python-pymongo (SUSE-SU-2024:1571-2)	14 Jun 202400:00	–	nessus
Tenable Nessus	TencentOS Server 4: python-pymongo (TSSA-2024:0921)	16 Jun 202500:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2024-21506	5 Mar 202500:00	–	nessus
Amazon	Medium: python-pymongo	13 May 202400:00	–	amazon
Amazon	Medium: python-pymongo	13 May 202400:00	–	amazon
CBLMariner	CVE-2024-21506 affecting package python-pymongo for versions less than 4.2.0-9	15 May 202521:13	–	cbl_mariner
Chainguard	CVE-2024-21506 vulnerabilities	6 Apr 202405:15	–	cgr

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-21506
github	www.github.com/mongodb/mongo-python-driver/commit/56b6b6dbc267d365d97c037082369dabf37405d2
gist	www.gist.github.com/keltecc/62a7c2bf74a997d0a7b48a0ff3853a03
github	www.github.com/mongodb/mongo-python-driver
security	www.security.snyk.io/vuln/SNYK-PYTHON-PYMONGO-6370597

02 Dec 2024 05:49Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.15.2