The following binaries to not support ASLR mongodump.exe and mongorestore.exe

mongodump.exe and mongorestore.exe were analysed using Microsoft’s BinSkim binary analyser. Several were found to not correctly implement Address Space Randomisation and as such could reduce the number of locations ASLR may relocate the binary, reducing its effectiveness at mitigating memory corruption vulnerabilities.

Team, can someone help us with the version number where ASLR support will be added for database tools

Looking forward to the response as it is a security risk for any organisation.

@MaBeuLux88_xxx / @Tarun_Gaur could you please help on this?

1 Like

Had the same question. Can anyone from MongoDB respond here ?

A response from the team is much appreciated, we have been waiting on this since June 5, almost a month