SUSE-SU-2024:1571-1 Security update for python-pymongo

This update for python-pymongo fixes the following issues: - CVE-2024-21506: Fixed out-of-bounds read in the BSON module bsc1222492...

OESA-2024-1388 python-pymongo security update

The PyMongo distribution contains tools for interacting with \ MongoDB database from Python.\ PyMongo supports MongoDB 2.6, 3.0, 3.2, 3.4, 3.6, 4.0 and 4.2. Security Fixes: Versions of the package pymongo before 4.6.3 are vulnerable to Out-of-bounds Read in the bson module. Using the crafted...

PyMongo < 4.6.3 Out-of-bounds Read

Versions of the package pymongo before 4.6.3 are vulnerable to Out-of-bounds Read in the bson module. Using the crafted payload the attacker could force the parser to deserialize unmanaged memory. The parser tries to interpret bytes next to buffer and throws an exception with string. If the...

Out-of-bounds Read

pymongo is vulnerable to Out-of-bounds Read. The vulnerability is due to improper validation of encoded BSON data during the deserialization process, which allows an attacker to submit a crafting payload resulting in an out-of-bounds read...

CVE-2024-21506

An out-of-bounds read vulnerability was found in Pymongo. When using a crafted payload, this flaw allows an attacker to force the parser to deserialize unmanaged memory. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product...

GHSA-CR6F-GF5W-VHRC vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-pymongo, datadog-agent...

GHSA-CR6F-GF5W-VHRC PyMongo Out-of-bounds Read in the bson module

Versions of the package pymongo before 4.6.3 are vulnerable to Out-of-bounds Read in the bson module. Using the crafted payload the attacker could force the parser to deserialize unmanaged memory. The parser tries to interpret bytes next to buffer and throws an exception with string. If the...

PyMongo Out-of-bounds Read in the bson module

Versions of the package pymongo before 4.6.3 are vulnerable to Out-of-bounds Read in the bson module. Using the crafted payload the attacker could force the parser to deserialize unmanaged memory. The parser tries to interpret bytes next to buffer and throws an exception with string. If the...

CVE-2024-21506

Rejected reason: Duplicate...

CVE-2024-21506 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-pymongo...

CVE-2024-21506 vulnerabilities

Vulnerabilities for packages: py3-pymongo, kubeflow-pipelines-visualization-server...

CVE-2024-21506

Rejected reason: Duplicate of CVE-2024-5629...

CVE-2024-21506

CVE-2024-21506 entry is rejected/not active and duplicates CVE-2024-5629.

CVE-2024-21506

Removed by vendor...

Number withdrawal

PyMongo is an official MongoDB Python driver for MongoDB Open Source. This CVE number has been withdrawn...

PT-2024-18921

Name of the Vulnerable Software and Affected Versions pymongo versions prior to 4.6.3 Description The issue concerns an Out-of-bounds Read in the bson module. An attacker could use a crafted payload to force the parser to deserialize unmanaged memory. The parser attempts to interpret bytes next t...

accomate (>=1.0.4, <=2.0.0.6), aind-analysis-arch-result-access (>=0.3.0, <=1.2.0) +266 more potentially affected by CVE-2024-5629 via pymongo (>=4.0.0, <=4.6.2)

pymongo PYPI version =4.0.0, =1.0.4, =0.3.0, =0.2.0, =0.1.0, =0.0.27, =0.3.1, =0.1.19, =1.9.0, =0.0.1a0, =0.0.2, =0.4.0, =0.1.0, =0.3.1 and more Source cves: CVE-2024-5629 Source advisory: SNYK:PYTHON-PYMONGO-7172112...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the bson module. Using the crafted payload the attacker could force the parser to deserialize unmanaged memory. The parser tries to interpret bytes next to buffer and throws an exception with string. If the followi...

quokka (>=0.0.1.dev84, <=0.4.1.dev22) potentially affected by CVE-2013-2132 via pymongo (2.4.1)

pymongo PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - quokka =0.0.1.dev84, =0.4.1.dev22 Source cves: CVE-2013-2132 Source advisory: GHSA-X33V-F3GP-GW2C...

quokka (>=0.0.1.dev84, <=0.4.1.dev22) potentially affected by CVE-2013-2132 via pymongo (2.4.1)

pymongo PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - quokka =0.0.1.dev84, =0.4.1.dev22 Source cves: CVE-2013-2132 Source advisory: OSV:GHSA-X33V-F3GP-GW2C...