Vulnerabilities CVE-2024-58370

CVE-2024-58370

High

Open

TLP:CLEAR

SurrealDB before 1.1.0 Uncontrolled Recursion Denial of Service

NVD CVE.org

DDoS

AI Analysis

No AI analysis yet.

Description

SurrealDB versions before 1.1.0 fail to enforce recursion depth limits when parsing nested SurrealQL statements including IF, RELATE, and attribute access idioms. Authorized attackers can submit queries with excessive nesting depth to cause stack overflow and crash the server.

Details

CVSS Score: 7.1
EPSS Score ⓘ: 0.27%

19.6th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Confidence: 90%
Published: Jul 18, 2026
Last Modified: Jul 28, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.