From b4a7ce22030be1ebfc0ccb4e3304de635172fb0c Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Tue, 15 Oct 2024 16:22:03 +0000 Subject: [PATCH] Publish GHSA-x33v-f3gp-gw2c --- .../GHSA-x33v-f3gp-gw2c.json | 19 +++++++------------ 1 file changed, 7 insertions(+), 12 deletions(-) diff --git a/advisories/github-reviewed/2022/05/GHSA-x33v-f3gp-gw2c/GHSA-x33v-f3gp-gw2c.json b/advisories/github-reviewed/2022/05/GHSA-x33v-f3gp-gw2c/GHSA-x33v-f3gp-gw2c.json index c67d91dc56c..b0bed5afd96 100644 --- a/advisories/github-reviewed/2022/05/GHSA-x33v-f3gp-gw2c/GHSA-x33v-f3gp-gw2c.json +++ b/advisories/github-reviewed/2022/05/GHSA-x33v-f3gp-gw2c/GHSA-x33v-f3gp-gw2c.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-x33v-f3gp-gw2c", - "modified": "2022-07-08T19:07:51Z", + "modified": "2024-10-15T16:20:38Z", "published": "2022-05-14T02:10:10Z", "aliases": [ "CVE-2013-2132" @@ -9,7 +9,10 @@ "summary": "Use of NullPointerException Catch to Detect NULL Pointer Dereference in Pymongo", "details": "bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to decoding of an \"invalid DBRef.\"", "severity": [ - + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N" + } ], "affected": [ { @@ -46,8 +49,8 @@ "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=710597" }, { - "type": "ADVISORY", - "url": "https://github.com/advisories/GHSA-x33v-f3gp-gw2c" + "type": "PACKAGE", + "url": "https://github.com/mongodb/mongo-python-driver" }, { "type": "WEB", @@ -72,14 +75,6 @@ { "type": "WEB", "url": "https://www.debian.org/security/2013/dsa-2705" - }, - { - "type": "WEB", - "url": "https://www.osvdb.org/93804" - }, - { - "type": "WEB", - "url": "https://www.securityfocus.com/bid/60252" } ], "database_specific": {