CVE-2024-58364

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-58364

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-58364.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-58364

Aliases

GHSA-8xff-473h-f863

Published

2026-07-18T13:10:05Z

Modified

2026-08-14T04:03:18Z

Severity

7.1 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator

Summary

SurrealDB before 1.2.1 Denial of Service via Parsing Error

Details

SurrealDB versions before 1.2.1 contain an uncaught exception handling vulnerability in span rendering when parsing queries with errors on line terminator characters. Authorized clients can submit malformed queries that trigger a panic in the span rendering code, crashing the server and causing denial of service.

Database specific

{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-248"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/58xxx/CVE-2024-58364.json"
}

References

Affected packages

Git / github.com/surrealdb/surrealdb

Affected ranges

Type

GIT

Repo

https://github.com/surrealdb/surrealdb

Events

Introduced

Fixed

70e98292ae76a5e798e2a54e9b4fa0875e26d731

Database specific

Show details

{
    "cpe": "cpe:2.3:a:surrealdb:surrealdb:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.2.1"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ]
}

Affected versions

v0.*

v0.1.0

v0.1.1

v0.1.10

v0.1.11

v0.1.12

v0.1.13

v0.1.14

v0.1.15

v0.1.16

v0.1.17

v0.1.18

v0.1.19

v0.1.2

v0.1.20

v0.1.21

v0.1.22

v0.1.23

v0.1.24

v0.1.25

v0.1.26

v0.1.27

v0.1.28

v0.1.29

v0.1.3

v0.1.30

v0.1.4

v0.1.5

v0.1.6

v0.1.7

v0.1.8

v0.1.9

v0.3.0

v1.*

v1.0.0

v1.0.0-beta.1

v1.0.0-beta.10

v1.0.0-beta.11

v1.0.0-beta.12

v1.0.0-beta.2

v1.0.0-beta.3

v1.0.0-beta.4

v1.0.0-beta.5

v1.0.0-beta.6

v1.0.0-beta.7

v1.0.0-beta.8

v1.0.0-beta.9

v1.0.0-beta.9+20230402

v1.2.0

v1.2.0-beta.1

v1.2.0-beta.2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-58364.json"