Advisories · Technology
dragonfly.
Every CVE that names dragonfly among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
Dragonfly through 2.0.2 Unbounded Memory Allocation via Negative COUNT in HRANDFIELD, ZRANDMEMBER and SRANDMEMBER
- dragonfly
- Denial of service
- CVSS 9.6 CriticalCritical · CVSS 9+
DragonflyDB stream RDB deserialization double-free
- dragonfly
- Memory corruption
- CVSS 8.8 High
DragonflyDB `CMS.INITBYDIM` integer overflow leads to a remote, attacker-controlled heap out-of-bounds write
- dragonfly
- Memory corruption
- CVSS 7.5 High
Dragonfly: RESTORE operations may crash the server
- dragonfly
- Memory corruption
- CVSS 2.3 Low
Dragonfly: RESP Protocol Injection via Lua redis.error_reply() in EvalSerializer
- dragonfly
- CWE-116
- CVSS 9.4 CriticalCritical · CVSS 9+
Integer Overflow or Wraparound vulnerability in dragonflydb/dragonfly
- dragonfly
- Memory corruption
- CVSS 3.3 Low
Integer underflow in Dragonfly
- Dragonfly
- Memory corruption
- CVSS 3.3 Low
Dragonfly: DragonflyDB Dragonfly before 1.27.0 allows authenticated users to cause a denial of…
- Dragonfly
- CWE-392