Red Hat Security AdvisoryRHSA-2013:1170
mongodb and pymongo security and enhancement update
Released 2013-08-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat MRG Grid for RHEL 6 Server v.2 mongodb-1.6.4-6.el6, mongodb-server-1.6.4-6.el6, pymongo-1.9-11.el6 +1
Fixes 2 records
Priority MEDIUM 56
MongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the nativeHelper function in SpiderMonkey, which allows remote authenticated users to cause a denial of service (invalid memory access an…
CVSS 2.0MEDIUM 6.0· Network · Low privileges · Interaction — · EPSS 0.44543 · Published 2013-10-01 · Partial fix CWE-20
Priority LOW 27
bson/_cbsonmodule.c in the mongo-python-driver (aka.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.04108 · Published 2013-08-15 · Fixed in 2.5.2 CWE-395
