Description (CNA)
DragonflyDB Dragonfly through 1.28.2 (fixed in 1.29.0) allows authenticated users to cause a denial of service (daemon crash) via a Lua library command that references a large negative integer.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| DragonflyDB / Dragonfly | affected 0 through 1.28.2 |
CWE
CWE-191
References
- https://github.com/dragonflydb/dragonfly/issues/4468
- https://github.com/dragonflydb/dragonfly/commit/4612aec9a78e3f604e6fb19bee51acde89723308
- https://gist.github.com/ankki-zsyang/d8215cf6e868d07546eaa5346a884ebd
ADP enrichment
No English description supplied.