{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/dragonflydb/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:dragonflydb:dragonfly:*:*:*:*:*:*:*:*"],"_cs_cves":[],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Dragonfly (\u003c= 2.0.2)"],"_cs_severities":["high"],"_cs_tags":["denial-of-service","vulnerability","dragonflydb"],"_cs_type":"advisory","_cs_vendors":["DragonflyDB"],"content_html":"\u003cp\u003eDragonflyDB versions 2.0.2 and earlier contain an unbounded memory allocation vulnerability identified as CVE-2026-111279. The flaw exists in the handling of the COUNT argument within the HRANDFIELD, ZRANDMEMBER, and SRANDMEMBER commands. An unauthenticated attacker can exploit this by sending a specially crafted command featuring a large negative COUNT value against a key containing a single element. This triggers the server to allocate an excessive amount of memory, forcing the operating system to invoke the Out-of-Memory (OOM) killer. The resulting memory pressure leads to the termination of the Dragonfly instance, causing a complete denial-of-service for all connected clients. Given the ease of exploitation through a single command, this vulnerability presents a significant risk to the availability of affected deployments.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of CVE-2026-111279 results in the immediate termination of the DragonflyDB instance. This causes a denial-of-service condition, disrupting all services dependent on the database. Because the attack only requires a single command to a key with at least one element, the barrier to exploitation is low for any network-reachable instance.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade all instances of DragonflyDB to a version beyond 2.0.2 that addresses the memory allocation flaw.\u003c/li\u003e\n\u003cli\u003eRestrict network access to DragonflyDB instances to authorized clients only, preventing unauthenticated access to the service.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-15T22:49:51Z","date_published":"2026-10-15T22:49:51Z","id":"https://feed.craftedsignal.io/briefs/2026-10-dragonfly-memory-exhaustion/","summary":"An unauthenticated denial-of-service vulnerability in DragonflyDB allows remote attackers to cause instance termination via unbounded memory allocation.","title":"Unbounded Memory Allocation in DragonflyDB","url":"https://feed.craftedsignal.io/briefs/2026-10-dragonfly-memory-exhaustion/"}],"language":"en","title":"CraftedSignal Threat Feed - DragonflyDB","version":"https://jsonfeed.org/version/1.1"}