Vulnerability DatabaseCVE-2015-4412
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
CVE-2015-4412
Published:February 05, 2018
Updated:September 21, 2026
BSON injection vulnerability in the legal? function in BSON (bson-ruby) gem before 3.0.4 for Ruby allows remote attackers to cause a denial of service (resource consumption) or inject arbitrary data via a crafted string.
Affected Packages
bson (RUBY):
Affected version(s) >=2.0.0 <3.0.4
Fix Suggestion:
Update to version 3.0.4
bson (RUBY):
Affected version(s) >=0.20 <1.12.3
Fix Suggestion:
Update to version 1.12.3
Related Resources (11)
https://nvd.nist.gov/vuln/detail/CVE-2015-4412
https://github.com/mongodb/bson-ruby
http://sakurity.com/blog/2015/06/04/mongo_ruby_regexp.html
https://github.com/mongodb/bson-ruby/compare/7446d7c6764dfda8dc4480ce16d5c023e74be5ca...28f34978a85b689a4480b4d343389bf4886522e7
http://www.securityfocus.com/bid/75045
https://github.com/mongodb/bson-ruby/commit/976da329ff03ecdfca3030eb6efe3c85e6db9999
https://sakurity.com/blog/2015/06/04/mongo_ruby_regexp.html
https://github.com/rubysec/ruby-advisory-db/blob/master/gems/bson/CVE-2015-4412.yml
https://github.com/advisories/GHSA-h6rj-8r3c-9gpj
http://www.openwall.com/lists/oss-security/2015/06/06/3
https://bugzilla.redhat.com/show_bug.cgi?id=1229750
Do you need more information?
Contact Us
CVSS v4
Base Score:
9.3
Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
NONE
User Interaction
NONE
Vulnerable System Confidentiality
HIGH
Vulnerable System Integrity
HIGH
Vulnerable System Availability
HIGH
Subsequent System Confidentiality
NONE
Subsequent System Integrity
NONE
Subsequent System Availability
NONE
CVSS v3
Base Score:
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Weakness Type (CWE)
Uncontrolled Resource Consumption
CWE-400
EPSS
Base Score:
4.07