{"id":23056,"date":"2026-09-16T01:28:08","date_gmt":"2026-09-16T01:28:08","guid":{"rendered":"https:\/\/www.mailgun.com\/blog\/mailgun-e-heartbleed\/"},"modified":"2026-09-16T01:28:08","modified_gmt":"2026-09-16T01:28:08","slug":"mailgun-e-heartbleed","status":"publish","type":"blog","link":"https:\/\/www.mailgun.com\/pt\/blog\/product\/mailgun-e-heartbleed\/","title":{"rendered":"Mailgun e Heartbleed"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>Isso foi relatado em 10 de abril de 2014.<\/strong><\/p>\n\n\n\r\n    <nav data-content-type=\"longform\" class=\"toc-block longform-spacings px-5 py-6 px-md-6 px-lg-7 py-md-7 bg-light fs-sm rounded-lg\" aria-labelledby=\"toc-title-5444\"><p class=\"h5 m-0\" id=\"toc-title-5444\">\u00cdndice<\/p><div class=\"d-flex mt-3\"><div class=\"w-auto fw-bold text-accent d-flex me-2\">01<\/div><div class=\"d-flex flex-column\"><a class=\"fw-bold scrollme link-body-color text-accent\" href=\"#heartbleed\">Heartbleed<\/a><\/div><\/div><div class=\"d-flex mt-3\"><div class=\"w-auto fw-bold text-accent d-flex me-2\">02<\/div><div class=\"d-flex flex-column\"><a class=\"fw-bold scrollme link-body-color text-accent\" href=\"#mitigacao\">Mitiga\u00e7\u00e3o<\/a><\/div><\/div><div class=\"d-flex mt-3\"><div class=\"w-auto fw-bold text-accent d-flex me-2\">03<\/div><div class=\"d-flex flex-column\"><a class=\"fw-bold scrollme link-body-color text-accent\" href=\"#impacto-no-cliente\">Impacto no cliente<\/a><\/div><\/div><\/nav>\n\n\n<h2 class=\"wp-block-heading\">Heartbleed<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">No in\u00edcio desta semana, recebemos um alerta sobre uma vulnerabilidade de seguran\u00e7a no OpenSSL [<a href=\"http:\/\/heartbleed.com\/\" target=\"_tabs\" rel=\"noopener noreferrer\">1<\/a>] [<a href=\"https:\/\/news.ycombinator.com\/item?id=7548991\" target=\"_tabs\" rel=\"noopener noreferrer\">2<\/a>]. Embora essa vulnerabilidade n\u00e3o estivesse no c\u00f3digo da Mailgun, usamos a biblioteca OpenSSL para proteger as conex\u00f5es HTTPS dos nossos servidores, portanto, tamb\u00e9m ficamos suscet\u00edveis a ela. No jarg\u00e3o de seguran\u00e7a, o Heartbleed foi uma vulnerabilidade de leitura arbitr\u00e1ria que permitia a invasores ler 64 kb de mem\u00f3ria do espa\u00e7o de mem\u00f3ria dos processos afetados. O que tornou esse bug particularmente perigoso \u00e9 que ele n\u00e3o deixava rastros e permitia que invasores tivessem acesso \u00e0s chaves privadas, basicamente burlando o mecanismo de seguran\u00e7a TLS.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Mitiga\u00e7\u00e3o<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Assim que soubemos do Heartbleed, analisamos onde nossa infraestrutura estava vulner\u00e1vel e corrigimos os servidores afetados. A arquitetura da Mailgun permite encerrar todas as conex\u00f5es SSL\/TLS quando entram no nosso data center; sendo assim, tivemos apenas alguns servidores para corrigir. Esse trabalho foi conclu\u00eddo na ter\u00e7a-feira, 8 de abril de 2014, \u00e0s 17:00 BRT (13:00 PDT).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ap\u00f3s o lan\u00e7amento do patch, tamb\u00e9m atualizamos nossos certificados para garantir que, mesmo que as nossas chaves privadas tivessem sido roubadas, elas n\u00e3o pudessem mais ser usadas.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Se quiser verificar por conta pr\u00f3pria, voc\u00ea pode criar e executar um script chamado Heartbleed ou usar o aplicativo web deles para checar a seguran\u00e7a da Mailgun ou de qualquer outro site quanto \u00e0 vulnerabilidade Heartbleed [<a href=\"https:\/\/github.com\/FiloSottile\/Heartbleed\/\" target=\"_tabs\" rel=\"noopener noreferrer\">3<\/a>] [<a href=\"http:\/\/filippo.io\/Heartbleed\/\" target=\"_tabs\" rel=\"noopener noreferrer\">4<\/a>].<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Impacto no cliente<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Como essa vulnerabilidade n\u00e3o deixa rastros e permitiu a invasores ler de forma arbitr\u00e1ria a mem\u00f3ria dos nossos processos nginx, a sua chave de API e as credenciais SMTP podem ter sido comprometidas. Embora a probabilidade de um ataque desse tipo ter ocorrido seja baixa, recomendamos que todos os clientes regenerem a chave de API e as credenciais SMTP (\u00e9 poss\u00edvel fazer isso no \u201cPainel de controle\u201d) por precau\u00e7\u00e3o.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Se voc\u00ea tiver mais d\u00favidas, fique \u00e0 vontade para nos enviar um e-mail para\u00a0<a href=\"mailto:support@mailgun.com\" target=\"_tabs\" rel=\"noopener noreferrer\">support@mailgun.com<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">[1]\u00a0<a href=\"http:\/\/heartbleed.com\/\" target=\"_tabs\" rel=\"noopener noreferrer\">http:\/\/heartbleed.com<\/a><br>[2]\u00a0<a href=\"https:\/\/news.ycombinator.com\/item?id=7548991\" target=\"_tabs\" rel=\"noopener noreferrer\">https:\/\/news.ycombinator.com\/item?id=7548991<\/a><br>[3]\u00a0<a href=\"https:\/\/github.com\/FiloSottile\/Heartbleed\/\" target=\"_tabs\" rel=\"noopener noreferrer\">https:\/\/github.com\/FiloSottile\/Heartbleed\/<\/a><br>[4]\u00a0<a href=\"http:\/\/filippo.io\/Heartbleed\/\" target=\"_tabs\" rel=\"noopener noreferrer\">http:\/\/filippo.io\/Heartbleed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Uma vis\u00e3o geral sobre a vulnerabilidade de seguran\u00e7a Heartbleed no OpenSSL, que afetou a Mailgun em 2014. Leia mais&#8230;<\/p>\n","protected":false},"author":13,"featured_media":4555,"menu_order":0,"template":"","meta":{"_acf_changed":false,"footnotes":""},"blog_category":[22],"class_list":["post-23056","blog","type-blog","status-publish","has-post-thumbnail","hentry","blog_category-product"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Mailgun e Heartbleed - Transactional Email API Service For Developers | Mailgun<\/title>\n<meta name=\"description\" content=\"Uma vis\u00e3o geral sobre a vulnerabilidade de seguran\u00e7a Heartbleed no OpenSSL, que afetou a Mailgun em 2014. Leia mais...\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.mailgun.com\/pt\/blog\/product\/mailgun-e-heartbleed\/\" \/>\n<meta property=\"og:locale\" content=\"pt_BR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Mailgun e Heartbleed - Transactional Email API Service For Developers | Mailgun\" \/>\n<meta property=\"og:description\" content=\"Uma vis\u00e3o geral sobre a vulnerabilidade de seguran\u00e7a Heartbleed no OpenSSL, que afetou a Mailgun em 2014. Leia mais...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.mailgun.com\/pt\/blog\/product\/mailgun-e-heartbleed\/\" \/>\n<meta property=\"og:site_name\" content=\"Transactional Email API Service For Developers | Mailgun\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/MG-Blog-Product.png\" \/>\n\t<meta property=\"og:image:width\" content=\"720\" \/>\n\t<meta property=\"og:image:height\" content=\"448\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/blog\\\/product\\\/mailgun-e-heartbleed\\\/\",\"url\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/blog\\\/product\\\/mailgun-e-heartbleed\\\/\",\"name\":\"Mailgun e Heartbleed - Transactional Email API Service For Developers | Mailgun\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/blog\\\/product\\\/mailgun-e-heartbleed\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/blog\\\/product\\\/mailgun-e-heartbleed\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.mailgun.com\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/MG-Blog-Product.png\",\"datePublished\":\"2026-09-16T01:28:08+00:00\",\"description\":\"Uma vis\u00e3o geral sobre a vulnerabilidade de seguran\u00e7a Heartbleed no OpenSSL, que afetou a Mailgun em 2014. Leia mais...\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/blog\\\/product\\\/mailgun-e-heartbleed\\\/#breadcrumb\"},\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/blog\\\/product\\\/mailgun-e-heartbleed\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/blog\\\/product\\\/mailgun-e-heartbleed\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.mailgun.com\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/MG-Blog-Product.png\",\"contentUrl\":\"https:\\\/\\\/www.mailgun.com\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/MG-Blog-Product.png\",\"width\":720,\"height\":448},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/blog\\\/product\\\/mailgun-e-heartbleed\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/inicio\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Blog\",\"item\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Mailgun e Heartbleed\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/#website\",\"url\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/\",\"name\":\"Transactional Email API Service For Developers | Mailgun\",\"description\":\"Poderosas APIs de e-mail transacional que permitem a voc\u00ea enviar, receber e rastrear e-mails, criadas com os desenvolvedores em mente. Saiba mais hoje mesmo!\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-BR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/#organization\",\"name\":\"Transactional Email API Service For Developers | Mailgun\",\"url\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.mailgun.com\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/cropped-android-chrome-512x512-1.png\",\"contentUrl\":\"https:\\\/\\\/www.mailgun.com\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/cropped-android-chrome-512x512-1.png\",\"width\":512,\"height\":512,\"caption\":\"Transactional Email API Service For Developers | Mailgun\"},\"image\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Mailgun e Heartbleed - Transactional Email API Service For Developers | Mailgun","description":"Uma vis\u00e3o geral sobre a vulnerabilidade de seguran\u00e7a Heartbleed no OpenSSL, que afetou a Mailgun em 2014. Leia mais...","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.mailgun.com\/pt\/blog\/product\/mailgun-e-heartbleed\/","og_locale":"pt_BR","og_type":"article","og_title":"Mailgun e Heartbleed - Transactional Email API Service For Developers | Mailgun","og_description":"Uma vis\u00e3o geral sobre a vulnerabilidade de seguran\u00e7a Heartbleed no OpenSSL, que afetou a Mailgun em 2014. Leia mais...","og_url":"https:\/\/www.mailgun.com\/pt\/blog\/product\/mailgun-e-heartbleed\/","og_site_name":"Transactional Email API Service For Developers | Mailgun","og_image":[{"width":720,"height":448,"url":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/MG-Blog-Product.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.mailgun.com\/pt\/blog\/product\/mailgun-e-heartbleed\/","url":"https:\/\/www.mailgun.com\/pt\/blog\/product\/mailgun-e-heartbleed\/","name":"Mailgun e Heartbleed - Transactional Email API Service For Developers | Mailgun","isPartOf":{"@id":"https:\/\/www.mailgun.com\/pt\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.mailgun.com\/pt\/blog\/product\/mailgun-e-heartbleed\/#primaryimage"},"image":{"@id":"https:\/\/www.mailgun.com\/pt\/blog\/product\/mailgun-e-heartbleed\/#primaryimage"},"thumbnailUrl":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/MG-Blog-Product.png","datePublished":"2026-09-16T01:28:08+00:00","description":"Uma vis\u00e3o geral sobre a vulnerabilidade de seguran\u00e7a Heartbleed no OpenSSL, que afetou a Mailgun em 2014. Leia mais...","breadcrumb":{"@id":"https:\/\/www.mailgun.com\/pt\/blog\/product\/mailgun-e-heartbleed\/#breadcrumb"},"inLanguage":"pt-BR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.mailgun.com\/pt\/blog\/product\/mailgun-e-heartbleed\/"]}]},{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/www.mailgun.com\/pt\/blog\/product\/mailgun-e-heartbleed\/#primaryimage","url":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/MG-Blog-Product.png","contentUrl":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/MG-Blog-Product.png","width":720,"height":448},{"@type":"BreadcrumbList","@id":"https:\/\/www.mailgun.com\/pt\/blog\/product\/mailgun-e-heartbleed\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.mailgun.com\/pt\/inicio\/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https:\/\/www.mailgun.com\/pt\/blog\/"},{"@type":"ListItem","position":3,"name":"Mailgun e Heartbleed"}]},{"@type":"WebSite","@id":"https:\/\/www.mailgun.com\/pt\/#website","url":"https:\/\/www.mailgun.com\/pt\/","name":"Transactional Email API Service For Developers | Mailgun","description":"Poderosas APIs de e-mail transacional que permitem a voc\u00ea enviar, receber e rastrear e-mails, criadas com os desenvolvedores em mente. Saiba mais hoje mesmo!","publisher":{"@id":"https:\/\/www.mailgun.com\/pt\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.mailgun.com\/pt\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-BR"},{"@type":"Organization","@id":"https:\/\/www.mailgun.com\/pt\/#organization","name":"Transactional Email API Service For Developers | Mailgun","url":"https:\/\/www.mailgun.com\/pt\/","logo":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/www.mailgun.com\/pt\/#\/schema\/logo\/image\/","url":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/06\/cropped-android-chrome-512x512-1.png","contentUrl":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/06\/cropped-android-chrome-512x512-1.png","width":512,"height":512,"caption":"Transactional Email API Service For Developers | Mailgun"},"image":{"@id":"https:\/\/www.mailgun.com\/pt\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/www.mailgun.com\/pt\/wp-json\/wp\/v2\/blog\/23056","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.mailgun.com\/pt\/wp-json\/wp\/v2\/blog"}],"about":[{"href":"https:\/\/www.mailgun.com\/pt\/wp-json\/wp\/v2\/types\/blog"}],"author":[{"embeddable":true,"href":"https:\/\/www.mailgun.com\/pt\/wp-json\/wp\/v2\/users\/13"}],"version-history":[{"count":0,"href":"https:\/\/www.mailgun.com\/pt\/wp-json\/wp\/v2\/blog\/23056\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.mailgun.com\/pt\/wp-json\/wp\/v2\/media\/4555"}],"wp:attachment":[{"href":"https:\/\/www.mailgun.com\/pt\/wp-json\/wp\/v2\/media?parent=23056"}],"wp:term":[{"taxonomy":"blog_category","embeddable":true,"href":"https:\/\/www.mailgun.com\/pt\/wp-json\/wp\/v2\/blog_category?post=23056"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}