CyberRota Analysis
AI-GeneratedAuthenticated users with OWNER or EDITOR permissions in SurrealDB versions prior to 2.0.5, 2.1.5, and 2.2.2 can exploit the DEFINE FUNCTION feature to create custom database functions that utilize nested FOR loops, potentially leading to excessive CPU consumption. This vulnerability can cause the server to become unresponsive, affecting overall availability and performance. Organizations using affected versions should prioritize patching to mitigate the risk of denial-of-service attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 allows authenticated users with OWNER or EDITOR permissions (at the root, namespace, or database level) to define custom database functions via DEFINE FUNCTION using nested FOR loops. Although a single loop's iteration count is constrained, nesting multiple loops (e.g., each with 1,000,000 iterations) is not, so an attacker can execute a function that consumes all server CPU time. Configured timeouts do not stop the execution, rendering the server unresponsive to other queries and connections until it is manually restarted.
Related CVEs
Other vulnerabilities affecting the same vendor(s)