Stack Overflow in FalkorDB Redis Module

Executive Summary

This vulnerability is a stack overflow in FalkorDB (a Redis module) versions 4.20.1 to 4.20.4. It occurs in the _GetGroup() function located in the /ops/op_aggregate.c file. Attackers can exploit this by sending specially crafted input to cause a Denial of Service (DoS) condition.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, monitor for crashes or abnormal termination of FalkorDB processes, particularly when handling aggregate operations. Check logs for stack overflow errors in the _GetGroup() function. No specific commands are provided in the context.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows attackers to crash the FalkorDB service by sending malicious input, leading to service disruption. If FalkorDB is part of a critical infrastructure or application, this could result in downtime or loss of functionality.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability causes a Denial of Service (DoS) via stack overflow, which may disrupt services handling sensitive data. GDPR requires ensuring data availability and security; a DoS could violate these principles. HIPAA mandates safeguards against disruptions affecting protected health information; this flaw may compromise compliance.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade FalkorDB to a version beyond v4.20.4 to address the stack overflow issue in the _GetGroup() function. Avoid processing untrusted inputs in vulnerable functions until patched.

Useful 0 Not Useful 0