MongoDB CVE-2013-2132 NULL Pointer Dereference Remote Denial of Service Vulnerability

Bugtraq ID:	60252
Class:	Design Error
CVE:	CVE-2013-2132
Remote:	Yes
Local:	No
Published:	May 31 2013 12:00AM
Updated:	Aug 21 2013 07:57PM
Credit:	Jibbers McGee
Vulnerable:	Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

MongoDB CVE-2013-2132 NULL Pointer Dereference Remote Denial of Service Vulnerability

MongoDB is prone to a denial-of-service vulnerability.

Successfully exploiting this issue will allow an attacker to crash the affected application, denying service to legitimate users.

MongoDB 2.5.1 is vulnerable; other versions may also be affected.

MongoDB CVE-2013-2132 NULL Pointer Dereference Remote Denial of Service Vulnerability

An attacker can exploit this issue using readily available tools.

MongoDB CVE-2013-2132 NULL Pointer Dereference Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

MongoDB CVE-2013-2132 NULL Pointer Dereference Remote Denial of Service Vulnerability

References: