Suggestions search

All statuses

Filter by:

With package: dragonfly-reverb

Found 3 matching suggestions

View:

Compact

Detailed

Untriaged

Permalink CVE-2026-62357

8.8 HIGH

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): None (N)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): Low (L)
Vulnerable System Impact Integrity (VI): High (H)
Vulnerable System Impact Availability (VA): High (H)
Subsequent System Impact Confidentiality (SC): None (N)
Subsequent System Impact Integrity (SI): None (N)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): None (N)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): Low (L)
Modified Vulnerable System Impact Integrity (MVI): High (H)
Modified Vulnerable System Impact Availability (MVA): High (H)
Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
Modified Subsequent System Impact Integrity (MSI): Negligible (N)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

created 1 week, 4 days ago Activity log

Created suggestion 1 week, 4 days ago

DragonflyDB `CMS.INITBYDIM` integer overflow leads to a remote, attacker-controlled heap out-of-bounds write

Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40.0, CMS.INITBYDIM and CMS.INITBYPROB accept dimensions whose width times depth times sizeof(int64_t) overflows in src/core/cms.cc, allocating an undersized counter buffer while CMS.INCRBY and CMS.QUERY use the unbounded dimensions, which allows an unauthenticated remote client to corrupt or disclose adjacent heap memory and crash the server. This issue is fixed in version 1.40.0.

References

https://github.com/dragonflydb/dragonfly/security/advisories/GHSA-cmmv-h748-v93x x_refsource_CONFIRM
https://github.com/dragonflydb/dragonfly/pull/7647 x_refsource_MISC
https://github.com/dragonflydb/dragonfly/commit/c004623249fe2151dc5d64e21364fb9fb07c90d3 x_refsource_MISC
https://github.com/dragonflydb/dragonfly/releases/tag/v1.40.0 x_refsource_MISC

Affected products

dragonfly

==< 1.40.0

Matching in nixpkgs

pkgs.dragonflydb

Modern replacement for Redis and Memcached

nixos-unstable 1.34.2
- nixpkgs-unstable 1.39.0
- nixos-unstable-small 1.39.0
nixos-26.05 1.39.0
- nixos-26.05-small 1.39.0
- nixpkgs-26.05-darwin 1.39.0

pkgs.dragonfly-reverb

Hall-style reverb based on freeverb3 algorithms

nixos-unstable 3.2.10
- nixpkgs-unstable 3.2.10
- nixos-unstable-small 3.2.10
nixos-26.05 3.2.10
- nixos-26.05-small 3.2.10
- nixpkgs-26.05-darwin 3.2.10

pkgs.python313Packages.dragonfly

Speech recognition framework allowing powerful Python-based scripting

nixos-unstable 0.35.0
- nixpkgs-unstable 0.35.0
- nixos-unstable-small 0.35.0
nixos-26.05 0.35.0
- nixos-26.05-small 0.35.0
- nixpkgs-26.05-darwin 0.35.0

pkgs.python314Packages.dragonfly

Speech recognition framework allowing powerful Python-based scripting

nixos-unstable 0.35.0
- nixpkgs-unstable 0.35.0
- nixos-unstable-small 0.35.0
nixos-26.05 0.35.0
- nixos-26.05-small 0.35.0
- nixpkgs-26.05-darwin 0.35.0

Package maintainers

@mrtnvgr Egor Martynov
@magnetophon Bart Brouns <bart@magnetophon.nl>
@typedrat Alexis Williams <alexis@typedr.at>
@Yureien Soham Sen <contact@sohamsen.me>

Untriaged

Permalink CVE-2026-47206

2.3 LOW

CVSS version (CVSS): 4.0
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Attack Requirement (AT): Present (P)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Vulnerable System Impact Confidentiality (VC): None (N)
Vulnerable System Impact Integrity (VI): None (N)
Vulnerable System Impact Availability (VA): None (N)
Subsequent System Impact Confidentiality (SC): Low (L)
Subsequent System Impact Integrity (SI): Low (L)
Subsequent System Impact Availability (SA): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Attack Requirement (MAT): Present (P)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Vulnerable System Impact Confidentiality (MVC): None (N)
Modified Vulnerable System Impact Integrity (MVI): None (N)
Modified Vulnerable System Impact Availability (MVA): None (N)
Modified Subsequent System Impact Confidentiality (MSC): Low (L)
Modified Subsequent System Impact Integrity (MSI): Low (L)
Modified Subsequent System Impact Availability (MSA): Negligible (N)
Safety (S): Not Defined (X)
Automatable (AU): Not Defined (X)
Recovery (R): Not Defined (X)
Value Density (V): Not Defined (X)
Vulnerability Response Effort (RE): Not Defined (X)
Provider Urgency (U): Not Defined (X)
Confidentiality Req. (CR): Not Defined (X)
Integrity Req. (IR): Not Defined (X)
Availability Req. (AR): Not Defined (X)
Exploit Maturity (E): Not Defined (X)

created 2 months ago Activity log

Created suggestion 2 months ago

Dragonfly: RESP Protocol Injection via Lua redis.error_reply() in EvalSerializer

Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.39.9, Dragonfly has a RESP Protocol Injection via Lua redis.error_reply() in EvalSerializer. An authenticated user can inject arbitrary RESP messages into the connection's response stream, potentially causing response desynchronization in connection-pool clients. This vulnerability is fixed in 1.39.9.

References

https://github.com/dragonflydb/dragonfly/security/advisories/GHSA-h77h-c6hc-qc9h x_refsource_CONFIRM
https://github.com/dragonflydb/dragonfly/issues/7328 exploitx_refsource_MISC
https://github.com/dragonflydb/dragonfly/pull/7332 x_refsource_MISC

Affected products

dragonfly

==< 1.38.9

Matching in nixpkgs

pkgs.dragonflydb

Modern replacement for Redis and Memcached

nixos-unstable -
- nixos-unstable-small 1.34.2
nixos-26.05 -
- nixos-26.05-small 1.34.2

pkgs.dragonfly-reverb

Hall-style reverb based on freeverb3 algorithms

nixos-unstable -
- nixos-unstable-small 3.2.10
nixos-26.05 -
- nixos-26.05-small 3.2.10

pkgs.python312Packages.dragonfly

None

pkgs.python313Packages.dragonfly

Speech recognition framework allowing powerful Python-based scripting

nixos-unstable -
- nixos-unstable-small 0.35.0
nixos-26.05 -
- nixos-26.05-small 0.35.0

pkgs.python314Packages.dragonfly

Speech recognition framework allowing powerful Python-based scripting

nixos-unstable -
- nixos-unstable-small 0.35.0
nixos-26.05 -
- nixos-26.05-small 0.35.0

Untriaged

Permalink CVE-2026-54341

7.5 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

created 2 months ago Activity log

Created suggestion 2 months ago

Dragonfly: RESTORE operations may crash the server

Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.39.0, a crafted RESTORE payload triggers an out-of-bounds read in DragonflyDB's listpack collection loaders, crashing the entire server process (SIGSEGV). Because DragonflyDB requires no authentication by default and RESTORE is a normal keyspace command, an unauthenticated remote attacker can crash the server with a single ~24-byte command — a remote, repeatable denial of service. This vulnerability is fixed in 1.39.0.