CVE-2025-26268

Low CVSS: 3.3

DragonflyDB Dragonfly before 1.27.0 allows authenticated users to cause a denial of service (daemon crash) via a crafted Redis command. The validity of the scan cursor was not checked.

Vendor

Dragonflydb

Product

Dragonfly

CWE

CWE-392

Yayın Tarihi

2025-04-17 18:15:48

Güncelleme

2025-04-25 16:33:11

Source Identifier

cve@mitre.org

KEV Date Added

Kategoriler

CWE-392 Dragonfly LOW Dragonflydb 2025

Referanslar

https://github.com/dragonflydb/dragonfly/commit/d1fac0f912edb323a2bdd6404c518cda21eac243 https://github.com/dragonflydb/dragonfly/compare/v1.26.4...v1.27.0 https://github.com/dragonflydb/dragonfly/issues/4466 https://github.com/dragonflydb/dragonfly/issues/4466