PT-2024-40311 · Surrealdb · Surrealdb

Published 2024-11-22 · Updated 2024-11-22

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SurrealDB versions prior to 2.1.0

Description The issue arises from the rand::time() function in SurrealQL, which can potentially return None and cause a panic when unwrap is called, leading to a denial of service. An authorized client can make repeated calls to rand::time() to trigger a panic and crash the server.

Recommendations For versions prior to 2.1.0, consider limiting the ability of untrusted clients to run the rand::time() function using security capabilities to minimize the impact of the denial of service. Additionally, ensure that the SurrealDB process is configured to automatically restart after a crash. At the moment, there is no information about other mitigation measures for this vulnerability.

Fix

Weakness Enumeration

CWE-248

Related Identifiers

GHSA-H4F5-H82V-5W4R

Affected Products

Surrealdb

References · 4

• https://osv.dev/vulnerability/GHSA-h4f5-h82v-5w4r · Vendor Advisory
• https://github.com/surrealdb/surrealdb · Note
• https://github.com/surrealdb/surrealdb/security/advisories/GHSA-h4f5-h82v-5w4r · Note
• https://github.com/surrealdb/surrealdb/pull/5126 · Note