CVE-2013-2132: canonical ubuntu_linux
Vulnerability summary
CVE-2013-2132 is a medium (CVSS 4.3) vulnerability in canonical ubuntu_linux. EPSS estimates a 4.11% chance of exploitation in the next 30 days, higher than 90.6% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 2 · Related 1Timeline
- 15-08-2013PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to decoding of an "invalid DBRef."
CVSS metrics
2 scores · 2 sources · 2 versionsEPSS trend
Probability
4.11%
Chance of exploitation in the next 30 days
Percentile
91%
Versus all other CVEs
30-day change
+1.47 pp
From 2.63% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundMongo Python Driver
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Canonical1 product
- ubuntu_linuxEOL12.04 | 12.10 | 13.04
Debian1 product
- pymongo< 2.5.2-1 | < 2.2-4+deb7u1
Mageia1 product
- python-pymongo< 2.5-1.1.mga3
Mongodb1 product
- mongodbEOL≤ 2.5.1 | 1.2.0 | 1.4.0 | 1.6.0 | 1.8.0 | 2.0.0 | 2.2.0 | 2.4.0 | 2.4.1 | 2.4.2 | 2.4.3 | 2.4.4 | 2.4.5 | 2.5.0
Opensuse1 product
- opensuseEOL12.3
PyPI1 product
- pymongo< a060c15ef87e0f0e72974c7c0e57fe811bbd06a2 | < 2.5.2
6 vendors · 6 products
References
21 links- github.com/mongodb/mongo-python-driver/commit/a060c15ef87e0f0e72974c7c0e57fe811bbd06a2X Refsource MISCExploitPatchWEBFIX
