Vulnerability Report

CVE-2013-2132

Title: Mongodb Memory Corruption

Memory Corruption

Proof Of Concept

No public PoC currently indexed for CVE-2013-2132.

CWE Category NVD-CWE-noinfo

Published Date Aug 15, 2013

Modified Date Jun 16, 2026

Exploit Status Not Found

Score 4.3 CVSS v2.0

Exploit Probability (EPSS)

2.63%

Vulnerability Summary

CVE-2013-2132: bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to decoding of an "invalid DBRef."

Impacted Vendors

mongodb 1

anynines 1

Reference Links

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=710597 http://lists.opensuse.org/opensuse-updates/2013-06/msg00180.html http://seclists.org/oss-sec/2013/q2/447 http://ubuntu.com/usn/usn-1897-1 http://www.debian.org/security/2013/dsa-2705 http://www.osvdb.org/93804 http://www.securityfocus.com/bid/60252 https://github.com/mongodb/mongo-python-driver/commit/a060c15ef87e0f0e72974c7c0e57fe811bbd06a2 https://jira.mongodb.org/browse/PYTHON-532 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=710597 http://lists.opensuse.org/opensuse-updates/2013-06/msg00180.html http://seclists.org/oss-sec/2013/q2/447 http://ubuntu.com/usn/usn-1897-1 http://www.debian.org/security/2013/dsa-2705 http://www.osvdb.org/93804 http://www.securityfocus.com/bid/60252 https://github.com/mongodb/mongo-python-driver/commit/a060c15ef87e0f0e72974c7c0e57fe811bbd06a2 https://jira.mongodb.org/browse/PYTHON-532

CVSS v2.0

Source Entity [email protected]

Severity MEDIUM

4.3

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:N/AC:M/Au:N/C:N/I:N/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2013-2132 Exploits & PoCs (Proof Of Concept)

No public PoCs found in our database for this CVE.

June 16, 2026 MODIFIED

Vulnerability data updated via NVD.

April 29, 2026 MODIFIED

Vulnerability data updated via NVD.

April 11, 2025 MODIFIED

Vulnerability data or affected products updated.

August 15, 2013 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A

Complexity N/A

Privileges N/A

Interaction NONE

CVSS Vector String


                                    AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected Stack

No specific products linked.