Description
The default configuration for MongoDB before 2.3.2 does not validate objects, which allows remote authenticated users to cause a denial of service (crash) or read system memory via a crafted BSON object in the column name in an insert command, which triggers a buffer over-read.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Satellite Capsule 6 | foreman-proxy | 1.6.0.30-1.el6sat | RHEA-2014:1175 |
| Red Hat Satellite Capsule 6 | mongodb +2 | 2.4.6-2.el6sat | RHEA-2014:1175 |
| Red Hat Satellite Capsule 6 | python-anyjson | 0.3.3-4.el6sat | RHEA-2014:1175 |
| Red Hat Satellite Capsule 6 | python-httplib2 | 0.6.0-6.el7sat | RHEA-2014:1175 |
| Red Hat Satellite Capsule 6 | python-simplejson | 3.2.0-1.el7sat | RHEA-2014:1175 |
| Red Hat Satellite Capsule 6 | rubygem-kafo | 0.6.4-2.el6sat | RHEA-2014:1175 |
| Red Hat Satellite Capsule 6 | rubygem-kafo_parsers | 0.0.3-2.el6sat | RHEA-2014:1175 |
| Red Hat Satellite Capsule 6 | v8 | 1:3.14.5.10-9.el6sat | RHEA-2014:1175 |
| Red Hat Satellite 6 | foreman +6 | 1.6.0.44-1.el6sat | RHEA-2014:1175 |
| Red Hat Satellite 6 | foreman-proxy | 1.6.0.30-1.el6sat | RHEA-2014:1175 |
| Red Hat Satellite 6 | katello | 1.5.0-30.el6sat | RHEA-2014:1175 |
| Red Hat Satellite 6 | mongodb +2 | 2.4.6-2.el6sat | RHEA-2014:1175 |
| Red Hat Satellite 6 | python-anyjson | 0.3.3-4.el6sat | RHEA-2014:1175 |
| Red Hat Satellite 6 | python-httplib2 | 0.6.0-6.el7sat | RHEA-2014:1175 |
| Red Hat Satellite 6 | python-simplejson | 3.2.0-1.el7sat | RHEA-2014:1175 |
| Red Hat Satellite 6 | rubygem-hammer_cli_foreman | 0.1.1-16.el6sat | RHEA-2014:1175 |
| Red Hat Satellite 6 | rubygem-hammer_cli_foreman_tasks | 0.0.3-3.el6sat | RHEA-2014:1175 |
| Red Hat Satellite 6 | rubygem-kafo | 0.6.4-2.el6sat | RHEA-2014:1175 |
| Red Hat Satellite 6 | rubygem-kafo_parsers | 0.0.3-2.el6sat | RHEA-2014:1175 |
| Red Hat Satellite 6 | v8 | 1:3.14.5.10-9.el6sat | RHEA-2014:1175 |
| Red Hat OpenStack 4 | mongodb +2 | 2.2.4-4.el6ost | RHSA-2014:0230 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat MRG 2 | condor +8 | 7.8.10-0.1.el6 | RHSA-2014:0440 |
| Red Hat MRG 2 | cumin | 0.1.5797-1.el6 | RHSA-2014:0440 |
| Red Hat MRG 2 | mongodb +1 | 1.6.4-7.el6 | RHSA-2014:0440 |
| Red Hat MRG 2 | mrg-release | 2.5.0-1.el6 | RHSA-2014:0440 |
Advisories 3
- RHEA-2014:1175 Red Hat Enhancement Advisory: Release of Satellite 6.0 Red Hat Security Advisories (RHSA) · Oct 7, 2026
- RHSA-2014:0440 Red Hat Security Advisory: Red Hat Enterprise MRG Grid 2.5 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2014:0230 Red Hat Security Advisory: mongodb security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
References
- [oss-security] 20140107 Re: MongoDB memory over-read via incorrect BSON object length (was: [HITB-Announce] HITB Magazine Issue 10 Out Now) mailing-list
- [oss-security] 20140107 MongoDB memory over-read via incorrect BSON object length (was: [HITB-Announce] HITB Magazine Issue 10 Out Now) mailing-list
- RHSA-2014:0230 vendor-advisory
- https://jira.mongodb.org/browse/SERVER-7769
- http://blog.ptsecurity.com/2012/11/attacking-mongodb.html
- RHSA-2014:0440 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1049748
- [oss-security] 20140108 Re: MongoDB memory over-read via incorrect BSON object length (was: [HITB-Announce] HITB Magazine Issue 10 Out Now) mailing-list