CVE-2013-1892
Fixed in a distro release EPSS 45%
MongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the nativeHelper function in SpiderMonkey, which allows remote authenticated users to cause a denial of service (invalid memory access and server crash) or execute arbitrary code via a crafted memory address in the first argument.
Products: mongodb, redhat enterprise_mrg
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat enterprise mrg 2 server el6 | mongodb | 0:1.6.4-6.el6 |
| Red Hat enterprise mrg 2 server el6 | mongodb-debuginfo | 0:1.6.4-6.el6 |
| Red Hat enterprise mrg 2 server el6 | mongodb-server | 0:1.6.4-6.el6 |
| Red Hat enterprise mrg 2 server el6 | pymongo | 0:1.9-11.el6 |
| Red Hat enterprise mrg 2 server el6 | pymongo-debuginfo | 0:1.9-11.el6 |
| Red Hat enterprise mrg 2 server el6 | python-bson | 0:1.9-11.el6 |