Medium USN-6904-1 1 CVE

pymongo vulnerability

Published Jul 22, 2024 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

It was discovered that PyMongo incorrectly handled certain BSON.
An attacker could possibly use this issue to read sensitive information
or cause a crash.

Fixed packages 5

Release	Package	Fixed in
Ubuntu · 20.04 LTS 20.04:LTS	pymongo	3.10.1-0ubuntu2.1
Ubuntu · 22.04 LTS 22.04:LTS	pymongo	3.11.0-1ubuntu0.22.04.1
Ubuntu · 24.04 LTS 24.04:LTS	pymongo	3.11.0-1ubuntu0.24.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS	pymongo	3.2-1ubuntu0.1~esm1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS	pymongo	3.6.1+dfsg1-1ubuntu0.1~esm1

Vulnerabilities 1

Medium 4.7

CVE-2024-5629

Out-of-bounds read in bson module of PyMongo

An out-of-bounds read in the 'bson' module of PyMongo 4.6.2 or earlier allows deserialization of malformed BSON provided by a Server to raise an exception which may contain arbitrary application memory.

MongoDB PyMongo kubeflow-pipelines-visualization-server pymongo Debian Ubuntu Azure Linux Wolfi PyPI

Jun 5, 2024

References

report
https://ubuntu.com/security/CVE-2024-5629