Description
SurrealDB versions before 2.2.2 contain a memory exhaustion vulnerability in the string::replace function that fails to restrict resulting string length when using regex patterns. An authenticated attacker can craft a malicious query to exhaust server memory through unbounded string allocations, causing denial of service.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
surrealdb surrealdb
Default version status: unaffected
2.2.0 to < 2.2.2affected2.2.2unaffected
pkg:cargo/surrealdbsurrealdb surrealdb
Default version status: unaffected
2.1.0 to < 2.1.5affected2.1.5unaffected
pkg:cargo/surrealdbsurrealdb surrealdb
Default version status: unaffected
0 to < 2.0.5affected2.0.5unaffected
pkg:cargo/surrealdb