Use of NullPointerException Catch to Detect NULL Pointer Dereference in Pymongo

中危 4.3CVE-2013-2132 · GHSA-x33v-f3gp-gw2c · PYSEC-2013-30 · Published 15/08/2013 · updated 16/06/2026

Package	Affected versions	Patched versions
pymongo PyPI	`< 2.5.2`	`2.5.2`
mongodb mongodb	`= 1.2.0= 1.4.0= 1.6.0= 1.8.0= 2.0.0= 2.2.0= 2.4.0= 2.4.1= 2.4.2= 2.4.3= 2.4.4= 2.4.5= 2.5.0≤ 2.5.1`	No fix yet

Description

bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to decoding of an "invalid DBRef."

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2013-2132 · ADVISORY
mongodb/mongo-python-driver commit a060c15 · WEB
bugs.debian.org/cgi-bin/bugreport.cgi · WEB
mongodb/mongo-python-driver · PACKAGE
pypa/advisory-database · WEB
jira.mongodb.org/browse/PYTHON-532 · WEB
lists.opensuse.org/opensuse-updates/2013-06/msg00180.html · WEB
seclists.org/oss-sec/2013/q2/447 · WEB
ubuntu.com/usn/usn-1897-1 · WEB
debian.org/security/2013/dsa-2705 · WEB
bugs.debian.org/cgi-bin/bugreport.cgi
lists.opensuse.org/opensuse-updates/2013-06/msg00180.html
seclists.org/oss-sec/2013/q2/447
ubuntu.com/usn/usn-1897-1 · Vendor Advisory
debian.org/security/2013/dsa-2705
osvdb.org/93804
securityfocus.com/bid/60252
GitHub Advisory GHSA-x33v-f3gp-gw2c · ADVISORY

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free