Sgolemon

**Nome do software vulnerável e versões afetadas** Versões do MongoDB Server anteriores à v5.0.6, inclusive **Descrição** Um usuário autenticado pode acionar uma asserção de invariável durante o envio de comandos devido a uma validação incorreta no banco de dados `$external`. Isso pode resultar em negação de serviço do mongod ou na falha do servidor. **Recomendações** Para versões anteriores à v5.0.6, inclusive, atualize para uma versão posterior à v5.0.6 para resolver o problema. Como solução alternativa temporária, considere restringir o acesso ao banco de dados `$external` para minimizar o risco de exploração.

**Nome do software vulnerável e versões afetadas** Versões do MongoDB Server anteriores à 3.6.20 Versões do MongoDB Server anteriores à 4.0.21 Versões do MongoDB Server anteriores à 4.2.10 **Descrição** O problema está relacionado à falta de codificação de saída ou escape no MongoDB, permitindo que um invasor remoto comprometa a integridade dos dados. O envio de comandos especialmente criados para um servidor MongoDB pode resultar na geração de entradas de log artificiais ou na divisão de entradas de log. **Recomendações** Para versões do servidor MongoDB anteriores à 3.6.20, atualize para a versão 3.6.20 ou posterior. Para versões do servidor MongoDB anteriores à 4.0.21, atualize para a versão 4.0.21 ou posterior. Para versões do servidor MongoDB anteriores à 4.2.10, atualize para a versão 4.2.10 ou posterior.

**Name of the Vulnerable Software and Affected Versions** PHP version 7.1.2 **Description** The issue in the ` zval get long func ex` function in `Zend/zend operators.c` allows attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via crafted use of `declare(ticks=` in a PHP script. The vendor disputes the classification of this issue as a vulnerability. **Recommendations** For PHP version 7.1.2, consider updating to a newer version to mitigate the risk, although the vendor does not acknowledge this as a security issue. As a temporary workaround, consider restricting the use of the `declare(ticks=` function in PHP scripts to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** PHP versions prior to 2017-03-07 **Description** The issue is related to the misparsing of fsockopen calls in the main/streams/xp socket.c component of PHP. This occurs when the function interprets the address and port in a way that can lead to a security risk, especially if the port number is hardcoded as a security policy but the hostname argument comes from untrusted input. For example, fsockopen('127.0.0.1:80', 443) is interpreted as if the address/port were 127.0.0.1:80:443, which is later truncated to 127.0.0.1:80. This behavior poses a risk if an attacker can manipulate the hostname argument. **Recommendations** For PHP versions prior to 2017-03-07, consider updating to a version released after 2017-03-07 to resolve the issue. As a temporary workaround, ensure that the hostname argument in fsockopen calls comes from trusted sources to minimize the risk of exploitation. Avoid using untrusted input for the hostname argument until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** PHP versions prior to 5.6.0beta4 **Description** The issue is related to a heap-based buffer overflow in the php parserr function, which can be exploited by remote servers using crafted DNS TXT records. This could lead to a denial of service (crash) and possibly allow the execution of arbitrary code. The dns get record function is also related to this issue. **Recommendations** For PHP versions prior to 5.6.0beta4, consider updating to a version that is not affected by this issue to prevent potential exploitation. As a temporary workaround, consider restricting the use of the dns get record function until a patch is available.