Description (CNA)
DragonflyDB Dragonfly before 1.27.0 allows authenticated users to cause a denial of service (daemon crash) via a crafted Redis command. The validity of the scan cursor was not checked.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| DragonflyDB / Dragonfly | affected 0 before 1.27.0 |
CWE
CWE-392
References
- https://github.com/dragonflydb/dragonfly/issues/4466
- https://github.com/dragonflydb/dragonfly/commit/d1fac0f912edb323a2bdd6404c518cda21eac243
- https://github.com/dragonflydb/dragonfly/compare/v1.26.4...v1.27.0
ADP enrichment
No English description supplied.