CVE-2012-6619

CVE-2012-6619 describes a denial-of-service vulnerability in MongoDB versions prior to 2.3.2, where the default configuration fails to validate BSON objects. This allows an authenticated attacker to crash the database or read system memory by submitting a specially crafted BSON object within an insert command's column name, triggering a buffer over-read. With a CVSS score of 6.4, this vulnerability is moderately severe, requiring network access and low attack complexity, potentially leading to partial confidentiality and availability impacts. While no public exploit code or active exploitation is indicated, it has received some community discussion and media coverage.