Description
SurrealDB 3.1.0 before 3.3.0 lets Surrealism modules exhaust server memory because module stdout/stderr lines are buffered unbounded in host memory, bypassing the configured module memory limit. An attacker can run an Owner-installed malicious module that writes output without newlines, crashing the server and denying service to all namespaces and databases.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| surrealdb | surrealdb | 3.1.0 – < 3.3.0 | 3.3.0 |
| surrealdb | surrealism-runtime | 0.3.0 – < 0.6.0 | 0.6.0 |
References
- GitHub Security Advisory (GHSA-jj89-wvrw-c4gp) vendor-advisory
- VulnCheck Advisory: SurrealDB 3.1.0 before 3.3.0 Memory Exhaustion via Surrealism Module Output Buffering third-party-advisory