Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
SurrealDB versions before 1.1.0 fail to enforce recursion depth limits when parsing nested SurrealQL statements including IF, RELATE, and attribute access idioms. Authorized attackers can submit queries with excessive nesting depth to cause stack overflow and crash the server.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2024-58370 Stack Overflow via Unbounded Recursion in SurrealDB Before 1.1.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2024-58370
Post summary
CVE‑2024‑58370 highlights a stack overflow vulnerability in SurrealDB versions prior to 1.1.0 caused by unbounded recursion, with no additional information on PoC, exploitation, or remediation.
CVE-2024-58370 SurrealDB versions before 1.1.0 fail to enforce recursion depth limits when parsing nested SurrealQL statements including IF, RELATE, and attribute access idioms. Aut… https://www.cve.org/CVERecord?id=CVE-2024-58370
Post summary
The post announces a recursion‑depth enforcement flaw in SurrealDB prior to version 1.1.0, describing how embedded SurrealQL constructs bypass limits, but offers no PoC, patch, or evidence of exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | surrealdb | surrealdb | - | - | - |