SurrealDB Net Module Null Byte HTTP Query Crash

Executive Summary

This is a Denial of Service (DoS) vulnerability in SurrealDB versions before 2.2.2. Authenticated users can crash the database by sending crafted HTTP queries containing null bytes to the /sql endpoint. The issue occurs due to an uncaught exception in the net module, which causes the database to become unstable and crash.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, monitor SurrealDB instances for crashes when processing HTTP queries to the /sql endpoint. Check logs for unhandled exceptions or null byte errors. Use network traffic analysis tools like Wireshark to inspect HTTP requests containing null bytes sent to /sql. Ensure SurrealDB versions are updated beyond 2.2.2, 2.1.5, or 2.0.5.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can disrupt applications relying on SurrealDB by causing unexpected crashes. It may lead to service outages, downtime, and loss of availability for dependent systems. Since it requires authentication, only authorized users can exploit it, but it still poses a risk to system stability.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability primarily impacts availability, which may lead to non-compliance with regulations requiring high availability of data systems, such as HIPAA for healthcare data or GDPR for data processing timelines. Service disruptions could result in violations of uptime or data access requirements.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update SurrealDB to versions 2.2.2, 2.1.5, or 2.0.5 or later. If updating is not possible, restrict untrusted query execution and implement input sanitization at the application layer to block null bytes in HTTP queries to the /sql endpoint.

Useful 0 Not Useful 0