DragonflyDB Dragonfly before 1.27.0 allows authenticated users to cause a denial of service (daemon crash) via a crafted Redis command. The validity of the scan cursor was not checked.
The product encounters an error but does not provide a status code or return value to indicate that an error has occurred.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Dragonfly | Dragonflydb | * | 1.27.0 (excluding) |