VDB
CVE-2013-2132
CVE-2013-2132
PUBLISHED
Reported by redhat · Published August 15, 2013
bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to decoding of an "invalid DBRef."
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| n/a | n/a | n/a, n/a |
Timeline
- Aug 15, 2013 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 8, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 2, 2023 EPSS Score
- May 25, 2023 EPSS Score
- Jul 16, 2023 EPSS Score
References
- openSUSE-SU-2013:1064 vendor-advisoryx_refsource_SUSE
- USN-1897-1 vendor-advisoryx_refsource_UBUNTU
- 93804 vdb-entryx_refsource_OSVDB
- x_refsource_MISC
- x_refsource_MISC
- [oss-security] 20130531 Re: CVE-2013-2132 MongoDB: User-triggerable NULL pointer dereference due to utter plebbery mailing-listx_refsource_MLIST
- x_refsource_MISC
- DSA-2705 vendor-advisoryx_refsource_DEBIAN
- 60252 vdb-entryx_refsource_BID