UpHeron
All vulnerabilities

Servers and applications

CVE-2013-2132

bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to decoding of an "invalid DBRef."

Severity
Medium 4.3
Published
15 Aug 2013
Last changed
16 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
MongoDBServers and applications · cpe:a:mongodb:mongodb
  • Version 2.5.0
  • Version 2.4.5
  • Version 2.4.4
  • Version 2.4.3
All 14 release lines
  • Every version up to 2.5.1
  • Version 1.2.0
  • Version 1.4.0
  • Version 1.6.0
  • Version 1.8.0
  • Version 2.0.0
  • Version 2.2.0
  • Version 2.4.0
  • Version 2.4.1
  • Version 2.4.2
  • Version 2.4.3
  • Version 2.4.4
  • Version 2.4.5
  • Version 2.5.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2013-2132
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2013-2132