[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249622

 
 

909

 
 

195521

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2014-2668Date: (C)2014-04-21   (M)2023-12-22


Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via the count parameter to /_uuids.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.0
Exploit Score: 10.0
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: NONE
Integrity: NONE
Availability: PARTIAL
  
Reference:
SECTRACK-1029967
EXPLOIT-DB-32519
SECUNIA-57572
BID-66474
apache-couchdb-cve20142668-dos(92161)
http://packetstormsecurity.com/files/125889
openSUSE-SU-2014:0526

CPE    1
cpe:/a:apache:couchdb
CWE    1
CWE-20
OVAL    5
oval:org.secpod.oval:def:107217
oval:org.secpod.oval:def:107282
oval:org.secpod.oval:def:107220
oval:org.secpod.oval:def:60222
...

© SecPod Technologies