Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Dragonfly incorrectly handles a task structure’s usedTraffic field
Vulnerability Description
Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the processPieceFromSource method does not update the structure’s usedTraffic field, because an uninitialized variable n is used as a guard to the AddTraffic method call, instead of the result.Size variable. A task is processed by a peer. The usedTraffic metadata is not updated during the processing. Rate limiting is incorrectly applied, leading to a denial-of-service condition for the peer. This vulnerability is fixed in 2.1.0.
CVSS Information
N/A
Vulnerability Type
使用未经初始化的变量
Vulnerability Title
Dragonfly 安全漏洞
Vulnerability Description
Dragonfly是DragonflyDB开源的一个框架，可以对任何内容类型进行动态处理。 Dragonfly 2.1.0之前版本存在安全漏洞，该漏洞源于未初始化变量n被用作AddTraffic方法调用的保护条件，导致usedTraffic字段未更新，可能引发拒绝服务攻击。
CVSS Information
N/A
Vulnerability Type
N/A