CVE-2013-1892

CVE-2013-1892 affects MongoDB before 2.0.9 and 2.2.x before 2.2.4, where requests to the nativeHelper function in SpiderMonkey aren’t validated, allowing remote authenticated users to cause invalid memory access, server crash (DoS), or potentially arbitrary code execution via a crafted memory add...

CVE-2013-3969

Removed by vendor...

CVE-2013-1892

Removed by vendor...

CVE-2013-3969

CVE-2013-3969 affects MongoDB 2.4.0–2.4.4, where the find prototype in scripting/engine_v8.h is exploitable. The vulnerability allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and server crash) and may enable arbitrary code execution via an invalid...

CVE-2013-1892

MongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the nativeHelper function in SpiderMonkey, which allows remote authenticated users to cause a denial of service invalid memory access and server crash or execute arbitrary code via a crafted memory address in the...

CVE-2013-3969

The find prototype in scripting/enginev8.h in MongoDB 2.4.0 through 2.4.4 allows remote authenticated users to cause a denial of service uninitialized pointer dereference and server crash or possibly execute arbitrary code via an invalid RefDB object...

PT-2013-4765

Name of the Vulnerable Software and Affected Versions MongoDB versions 2.4.0 through 2.4.4 Description The issue allows remote authenticated users to cause a denial of service or possibly execute arbitrary code via an invalid RefDB object, resulting from an uninitialized pointer dereference and...

PT-2013-3452 · Mongodb · Mongodb

Name of the Vulnerable Software and Affected Versions: MongoDB versions prior to 2.0.9 MongoDB versions 2.2.x prior to 2.2.4 Description: The issue is related to improper validation of requests to the nativeHelper function in SpiderMonkey. This allows remote authenticated users to cause a denial ...

CVE-2013-1892: Improper Input Validation

MongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the nativeHelper function in SpiderMonkey, which allows remote authenticated users to cause a denial of service invalid memory access and server crash or execute arbitrary code via a crafted memory address in the...

CVE-2013-3969: Undefined Security Weakness

The find prototype in scripting/enginev8.h in MongoDB 2.4.0 through 2.4.4 allows remote authenticated users to cause a denial of service uninitialized pointer dereference and server crash or possibly execute arbitrary code via an invalid RefDB object...

MongoDB server-side injection-vulnerability warning-the black bar safety net

Security researchers agixid in the MongoDB database 2. 2. 3 version on found a security vulnerability, and represents a Metasploit exploit payload being developed. The vulnerability is mainly MongoDB incorrect use SpiderMonkey Javascript NativeHelper function, the result can be injected into the...

Important: Red Hat Security Advisory: mongodb and pymongo security and enhancement update

Updated mongodb and pymongo packages that fix two security issues and add one enhancement are now available for Red Hat Enterprise MRG 2.3 for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring...

MongoDB: Server Side JavaScript Includes allow Remote Code Execution

MongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the nativeHelper function in SpiderMonkey, which allows remote authenticated users to cause a denial of service invalid memory access and server crash or execute arbitrary code via a crafted memory address in the...

CVE-2013-2132

bson/cbsonmodule.c in the mongo-python-driver aka. pymongo before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service NULL pointer dereference and crash via vectors related to decoding of an "invalid DBRef."...

DEBIAN-CVE-2013-2132

bson/cbsonmodule.c in the mongo-python-driver aka. pymongo before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service NULL pointer dereference and crash via vectors related to decoding of an "invalid DBRef."...

PYSEC-2013-30

bson/cbsonmodule.c in the mongo-python-driver aka. pymongo before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service NULL pointer dereference and crash via vectors related to decoding of an "invalid DBRef."...

Null pointer dereference

bson/cbsonmodule.c in the mongo-python-driver aka. pymongo before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service NULL pointer dereference and crash via vectors related to decoding of an "invalid DBRef."...

CVE-2013-2132

bson/cbsonmodule.c in the mongo-python-driver aka. pymongo before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service NULL pointer dereference and crash via vectors related to decoding of an "invalid DBRef."...

CVE-2013-2132

The CVE-2013-2132 issue affects the pymongo driver (mongo-python-driver) up to version 2.5.2, where bson/_cbsonmodule.c decoding of an invalid DBRef could trigger a context-dependent NULL pointer dereference, causing a denial-of-service crash. This vulnerability is associated with PyMongo used in...

CVE-2013-2132

bson/cbsonmodule.c in the mongo-python-driver aka. pymongo before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service NULL pointer dereference and crash via vectors related to decoding of an "invalid DBRef."...