PYSEC-2013-30

bson/cbsonmodule.c in the mongo-python-driver aka. pymongo before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service NULL pointer dereference and crash via vectors related to decoding of an "invalid DBRef."...

PT-2013-3553 · Mongodb · Mongo-Python-Driver +1

Name of the Vulnerable Software and Affected Versions: mongo-python-driver versions prior to 2.5.2 Description: The issue allows context-dependent attackers to cause a denial of service, resulting in a NULL pointer dereference and crash. This is related to the decoding of an "invalid DBRef" in th...