CVE-2012-6619

The default configuration for MongoDB before 2.3.2 does not validate objects, which allows remote authenticated users to cause a denial of service (crash) or read system memory via a crafted BSON object in the column name in an insert command, which triggers a buffer over-read.

• mongodb mongodb (<= 2.3.1) • mongodb mongodb 1.2.0 • mongodb mongodb 1.4.0 • mongodb mongodb 1.6.0 • mongodb mongodb 1.8.0 • mongodb mongodb 2.0.0 • mongodb mongodb 2.0.1 • mongodb mongodb 2.0.2 • mongodb mongodb 2.0.3 • mongodb mongodb 2.0.4 • mongodb mongodb 2.0.5 • mongodb mongodb 2.0.6 • mongodb mongodb 2.0.7 • mongodb mongodb 2.0.8 • mongodb mongodb 2.2.0 • mongodb mongodb 2.2.1 • mongodb mongodb 2.2.2 • mongodb mongodb 2.2.3 • mongodb mongodb 2.2.4 • mongodb mongodb 2.2.5 • mongodb mongodb 2.2.6 • mongodb mongodb 2.2.7 • mongodb mongodb 2.3.0