CyberRota Analysis
AI-GeneratedSurrealDB versions prior to 2.1.0 are vulnerable to an uncaught exception in the rand::time() function, which can lead to server panics when authorized clients invoke it with a None result from timestamp_opt. This vulnerability allows attackers to consistently trigger denial of service conditions, impacting the availability of the database. Organizations using affected versions should prioritize upgrading to mitigate potential disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SurrealDB versions before 2.1.0 contain an uncaught exception vulnerability in the rand::time() function that panics when unwrap is called on a None result from timestamp_opt. Authorized clients can repeatedly invoke rand::time() to reliably trigger server panics and cause denial of service.
Related CVEs
Other vulnerabilities affecting the same vendor(s)