CVE-2026-111279

Deferred Deferred - Pending Action

Dragonfly Memory Exhaustion via Negative COUNT Parameter

Publication date: 2026-10-15

Last updated on: 2026-10-15

Assigner: VulnCheck

Description

Dragonfly through 2.0.2 contains an unbounded memory allocation vulnerability that allows unauthenticated clients to exhaust memory by passing a negative COUNT to HRANDFIELD, ZRANDMEMBER or SRANDMEMBER. Attackers can send a single command against a one-element key with a huge negative COUNT to trigger the OOM killer, terminating the instance for all clients.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-15

Last Modified

2026-10-15

Generated

2026-10-16

AI Q&A

2026-10-16

EPSS Evaluated

N/A

NVD

CVE-2026-111279

Affected Vendors & Products

Vendor	Product	Version / Range
dragonflydb	dragonfly	0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-789	The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.

Attack-Flow Graph

Executive Summary

Dragonfly through 2.0.2 has an unbounded memory allocation flaw. Unauthenticated clients can crash the server by sending a negative COUNT value to commands like HRANDFIELD, ZRANDMEMBER or SRANDMEMBER. A single malicious command with a large negative COUNT on a one-element key forces the server to allocate excessive memory, triggering the OOM killer and terminating the instance for all users.

Detection Guidance

Monitor for unusual memory usage spikes or processes terminated by the OOM killer. Check Dragonfly logs for commands like HRANDFIELD, ZRANDMEMBER, or SRANDMEMBER with negative COUNT values. Use system monitoring tools like top, htop, or ps to observe memory consumption patterns.

Impact Analysis

This vulnerability allows attackers to crash your Dragonfly database instance remotely without authentication. Downtime occurs as the server terminates, disrupting all services relying on it. Data processing halts, and recovery requires restarting the instance, causing potential data loss or service unavailability.

Mitigation Strategies

Upgrade Dragonfly to version 2.0.3 or later to patch the unbounded memory allocation issue. Implement rate limiting or input validation to block commands with negative COUNT values. Restrict network access to Dragonfly instances to trusted clients only.

Hi! I’m here to help you understand CVE-2026-111279. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70