Impact
An integer overflow in the _BulkInsert_ReadProperty component of FalkorDB, a Redis module, is triggered by a crafted bulk insert command that causes the module to crash. The vulnerability does not enable code execution or data disclosure; its effect is a denial of service that renders the database or application unavailable to legitimate users.
Affected Systems
FalkorDB, Redis module version 4.20.1, is the only product affected according to the current information. No other vendor or product versions are reported as vulnerable.
Risk and Exploitability
The CVSS score of 5.3 indicates moderate severity, while the EPSS score of less than 1% shows a low likelihood of exploitation. The vulnerability is not included in the CISA KEV catalog. Based on the description, it is inferred that attackers would typically need network access to the Redis server and the ability to issue bulk insert commands, which often requires authentication or privileged access. Once the exploit is deployed, the affected instance will crash, causing a denial of service.
OpenCVE Enrichment