Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2024-5629

Good to know:

icon

Date: June 5, 2024

An out-of-bounds read in the 'bson' module of PyMongo 4.6.2 or earlier allows deserialization of malformed BSON provided by a Server to raise an exception which may contain arbitrary application memory.

Language: Python

Severity Score

Related Resources (8)

https://nvd.nist.gov/vuln/detail/CVE-2024-5629
https://lists.debian.org/debian-lts-announce/2024/06/msg00007.html
https://github.com/mongodb/mongo-python-driver
https://gist.github.com/keltecc/62a7c2bf74a997d0a7b48a0ff3853a03
https://jira.mongodb.org/browse/PYTHON-4305
https://lists.debian.org/debian-lts-announce/2024/09/msg00032.html
https://github.com/mongodb/mongo-python-driver/commit/56b6b6dbc267d365d97c037082369dabf37405d2
https://www.mend.io/vulnerability-database/CVE-2024-5629

Severity Score

Weakness Type (CWE)

Out-of-bounds Read

CWE-125

Top Fix

icon

Upgrade Version

Upgrade to version pymongo - 4.6.3

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): HIGH
Privileges Required (PR): NONE
User Interaction (UI): REQUIRED
Scope (S): CHANGED
Confidentiality (C): LOW
Integrity (I): NONE
Availability (A): LOW

Do you need more information?

Contact Us