Sgolemon

**Name of the Vulnerable Software and Affected Versions** MongoDB Server versions prior to and including v5.0.6 **Description** An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the `$external` database. This may result in mongod denial of service or server crash. **Recommendations** For versions prior to and including v5.0.6, update to a version later than v5.0.6 to resolve the issue. As a temporary workaround, consider restricting access to the `$external` database to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** MongoDB Server versions prior to 3.6.20 MongoDB Server versions prior to 4.0.21 MongoDB Server versions prior to 4.2.10 **Description** The issue is related to a lack of output encoding or escaping in MongoDB, allowing a remote attacker to impact data integrity. Sending specially crafted commands to a MongoDB Server may result in artificial log entries being generated or for log entries to be split. **Recommendations** For MongoDB Server versions prior to 3.6.20, update to version 3.6.20 or later. For MongoDB Server versions prior to 4.0.21, update to version 4.0.21 or later. For MongoDB Server versions prior to 4.2.10, update to version 4.2.10 or later.

**Name of the Vulnerable Software and Affected Versions** PHP version 7.1.2 **Description** The issue in the ` zval get long func ex` function in `Zend/zend operators.c` allows attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via crafted use of `declare(ticks=` in a PHP script. The vendor disputes the classification of this issue as a vulnerability. **Recommendations** For PHP version 7.1.2, consider updating to a newer version to mitigate the risk, although the vendor does not acknowledge this as a security issue. As a temporary workaround, consider restricting the use of the `declare(ticks=` function in PHP scripts to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** PHP versions prior to 2017-03-07 **Description** The issue is related to the misparsing of fsockopen calls in the main/streams/xp socket.c component of PHP. This occurs when the function interprets the address and port in a way that can lead to a security risk, especially if the port number is hardcoded as a security policy but the hostname argument comes from untrusted input. For example, fsockopen('127.0.0.1:80', 443) is interpreted as if the address/port were 127.0.0.1:80:443, which is later truncated to 127.0.0.1:80. This behavior poses a risk if an attacker can manipulate the hostname argument. **Recommendations** For PHP versions prior to 2017-03-07, consider updating to a version released after 2017-03-07 to resolve the issue. As a temporary workaround, ensure that the hostname argument in fsockopen calls comes from trusted sources to minimize the risk of exploitation. Avoid using untrusted input for the hostname argument until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** PHP versions prior to 5.6.0beta4 **Description** The issue is related to a heap-based buffer overflow in the php parserr function, which can be exploited by remote servers using crafted DNS TXT records. This could lead to a denial of service (crash) and possibly allow the execution of arbitrary code. The dns get record function is also related to this issue. **Recommendations** For PHP versions prior to 5.6.0beta4, consider updating to a version that is not affected by this issue to prevent potential exploitation. As a temporary workaround, consider restricting the use of the dns get record function until a patch is available.