CVE-2025-26269

Low CVSS: 3.3

DragonflyDB Dragonfly through 1.28.2 (fixed in 1.29.0) allows authenticated users to cause a denial of service (daemon crash) via a Lua library command that references a large negative integer.

Vendor

Dragonflydb

Product

Dragonfly

CWE

CWE-191

Yayın Tarihi

2025-04-17 18:15:49

Güncelleme

2025-07-11 16:36:33

Source Identifier

cve@mitre.org

KEV Date Added

Kategoriler

CWE-191 Dragonfly LOW Dragonflydb 2025

Referanslar

https://gist.github.com/ankki-zsyang/d8215cf6e868d07546eaa5346a884ebd https://github.com/dragonflydb/dragonfly/commit/4612aec9a78e3f604e6fb19bee51acde89723308 https://github.com/dragonflydb/dragonfly/issues/4468 https://github.com/dragonflydb/dragonfly/issues/4468