Test ID:	1.3.6.1.4.1.25623.1.1.10.2024.0187
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2024-0187)
Summary:	The remote host is missing an update for the 'python-pymongo' package(s) announced via the MGASA-2024-0187 advisory.
Description:	Summary: The remote host is missing an update for the 'python-pymongo' package(s) announced via the MGASA-2024-0187 advisory. Vulnerability Insight: Versions of the package pymongo before 4.6.3 are vulnerable to Out-of-bounds Read in the bson module. Using the crafted payload the attacker could force the parser to deserialize unmanaged memory. The parser tries to interpret bytes next to buffer and throws an exception with string. If the following bytes are not printable UTF-8 the parser throws an exception with a single byte. Affected Software/OS: 'python-pymongo' package(s) on Mageia 9. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2024-21506
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.