An out-of-bounds read in the 'bson' module of PyMongo 4.6.2 or earlier allows deserialization of malformed BSON provided by a Server to raise an exception which may contain arbitrary application memory.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-python-nose-docsalma-upgrade-python-pymongo-docalma-upgrade-python-sqlalchemy-docalma-upgrade-python-virtualenv-docalma-upgrade-python3-bsonalma-upgrade-python3-distroalma-upgrade-python3-docsalma-upgrade-python3-docutilsalma-upgrade-python3-nosealma-upgrade-python3-pygmentsalma-upgrade-python3-pymongoalma-upgrade-python3-pymongo-gridfsalma-upgrade-python3-pymysqlalma-upgrade-python3-scipyalma-upgrade-python3-sqlalchemyalma-upgrade-python3-virtualenvalma-upgrade-python3-wheelalma-upgrade-python3-wheel-wheelalma-upgrade-python36alma-upgrade-python36-debugalma-upgrade-python36-develalma-upgrade-python36-rpm-macros | Jun 6, 2025 | Jun 5, 2024 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-python3-bsonamazon-linux-2023-upgrade-python3-bson-debuginfoamazon-linux-2023-upgrade-python3-pymongoamazon-linux-2023-upgrade-python3-pymongo-debuginfoamazon-linux-2023-upgrade-python3-pymongo-gridfsamazon-linux-2023-upgrade-python-pymongo-debuginfoamazon-linux-2023-upgrade-python-pymongo-debugsourceamazon-linux-2023-upgrade-python-pymongo-doc | Mar 10, 2025 | Jun 5, 2024 | |
| Debian | debian-upgrade-pymongo | Jun 18, 2024 | Jun 5, 2024 | |
| Oracle_linux | — | oracle-linux-upgrade-python36oracle-linux-upgrade-python36-debugoracle-linux-upgrade-python36-develoracle-linux-upgrade-python36-rpm-macrosoracle-linux-upgrade-python3-bsonoracle-linux-upgrade-python3-distrooracle-linux-upgrade-python3-docsoracle-linux-upgrade-python3-docutilsoracle-linux-upgrade-python3-noseoracle-linux-upgrade-python3-pygmentsoracle-linux-upgrade-python3-pymongooracle-linux-upgrade-python3-pymongo-gridfsoracle-linux-upgrade-python3-pymysqloracle-linux-upgrade-python3-scipyoracle-linux-upgrade-python3-sqlalchemyoracle-linux-upgrade-python3-virtualenvoracle-linux-upgrade-python3-wheeloracle-linux-upgrade-python3-wheel-wheeloracle-linux-upgrade-python-nose-docsoracle-linux-upgrade-python-pymongo-docoracle-linux-upgrade-python-sqlalchemy-docoracle-linux-upgrade-python-virtualenv-doc | Jun 5, 2025 | Jun 5, 2024 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-python-nose-docsredhat-upgrade-python-pymongo-debuginforedhat-upgrade-python-pymongo-debugsourceredhat-upgrade-python-pymongo-docredhat-upgrade-python-sqlalchemy-docredhat-upgrade-python-virtualenv-docredhat-upgrade-python3-bsonredhat-upgrade-python3-bson-debuginforedhat-upgrade-python3-distroredhat-upgrade-python3-docsredhat-upgrade-python3-docutilsredhat-upgrade-python3-noseredhat-upgrade-python3-pygmentsredhat-upgrade-python3-pymongoredhat-upgrade-python3-pymongo-debuginforedhat-upgrade-python3-pymongo-gridfsredhat-upgrade-python3-pymysqlredhat-upgrade-python3-scipyredhat-upgrade-python3-scipy-debuginforedhat-upgrade-python3-sqlalchemyredhat-upgrade-python3-virtualenvredhat-upgrade-python3-wheelredhat-upgrade-python3-wheel-wheelredhat-upgrade-python36redhat-upgrade-python36-debugredhat-upgrade-python36-develredhat-upgrade-python36-rpm-macrosredhat-upgrade-scipy-debugsource | Jun 5, 2025 | Jun 5, 2024 | |
| Rocky_linux | rocky-upgrade-python-pymongo-debuginforocky-upgrade-python-pymongo-debugsourcerocky-upgrade-python3-bsonrocky-upgrade-python3-bson-debuginforocky-upgrade-python3-pymongorocky-upgrade-python3-pymongo-debuginforocky-upgrade-python3-pymongo-gridfsrocky-upgrade-python3-scipyrocky-upgrade-python3-scipy-debuginforocky-upgrade-python3-sqlalchemyrocky-upgrade-python36rocky-upgrade-python36-debugrocky-upgrade-python36-develrocky-upgrade-scipy-debugsource | Jul 31, 2025 | Jul 29, 2025 | |
| Ubuntu | ubuntu-pro-upgrade-python-bsonubuntu-pro-upgrade-python-bson-extubuntu-pro-upgrade-python3-bsonubuntu-pro-upgrade-python3-bson-extubuntu-upgrade-python3-bsonubuntu-upgrade-python3-bson-ext | Jul 23, 2024 | Jun 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub