CVE-2013-3969

6.5

MEDIUMCVSS v2

Published

October 1, 2013

Affected

2 projects

Assigned by

MITRE

Severity scale

010

Description

The find prototype in scripting/engine_v8.h in MongoDB 2.4.0 through 2.4.4 allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and server crash) or possibly execute arbitrary code via an invalid RefDB object.

mongodb

NPMThe official MongoDB driver for Node.js

= 2.4.2, = 2.4.0, = 2.4.3, = 2.4.4, = 2.4.1NVD

mongodb

RubyGemsPersistence for any Ruby Object & Driver enhancements for MongoDB.

= 2.4.2, = 2.4.0, = 2.4.3, = 2.4.4, = 2.4.1NVD

More on this CVE

NVD↗GitHub Advisory↗

Security Advisories

CVE-2013-3969

Description

More on this CVE