SurrealDB before 2.1.0 Denial of Service via rand::time()

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2024-58357 · Microsoft / collected KEV context

EUVD-2024-55674

GHSA-3h9v-xwgf-h5c5

GHSA-h4f5-h82v-5w4r

cve-program · CVE-2024-58357

• https://github.com/surrealdb/surrealdb/security/advisories/GHSA-h4f5-h82v-5w4r
• https://www.vulncheck.com/advisories/surrealdb-before-denial-of-service-via-rand-time

euvd · EUVD-2024-55674

• https://github.com/surrealdb/surrealdb/security/advisories/GHSA-h4f5-h82v-5w4r
• https://www.vulncheck.com/advisories/surrealdb-before-denial-of-service-via-rand-time

nvd · CVE-2024-58357

• https://github.com/surrealdb/surrealdb/security/advisories/GHSA-h4f5-h82v-5w4r
• https://www.vulncheck.com/advisories/surrealdb-before-denial-of-service-via-rand-time

osv · GHSA-h4f5-h82v-5w4r

• https://github.com/surrealdb/surrealdb/security/advisories/GHSA-h4f5-h82v-5w4r
• https://github.com/surrealdb/surrealdb/pull/5126
• https://github.com/surrealdb/surrealdb

No related operational record is retained in the current change model.