Skip to content
OpenAdvisories
Unscored DSA-2705-1 1 CVE

pymongo - denial of service

Published Jun 10, 2013 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 pymongo 2.2-4+deb7u1

Vulnerabilities 1

  • Medium —

    Use of NullPointerException Catch to Detect NULL Pointer Dereference in Pymongo

    bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to decoding of an "invalid DBRef."