medium5.0Public exploit code
CVE-2014-2668
Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via the count parameter to /_uuids.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apache CouchDB 1.5.0 - 'uuids' Denial of Service2014-03-26 · dos · multiple · Verified
Impact
Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via the count parameter to /_uuids.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Couchdb | through 1.5.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-updates/2014-04/msg00039.html
- http://packetstormsecurity.com/files/125889
- http://secunia.com/advisories/57572
- http://www.exploit-db.com/exploits/32519
- http://www.securityfocus.com/bid/66474
- http://www.securitytracker.com/id/1029967
- https://exchange.xforce.ibmcloud.com/vulnerabilities/92161
- http://lists.opensuse.org/opensuse-updates/2014-04/msg00039.html
- http://packetstormsecurity.com/files/125889
- http://secunia.com/advisories/57572
- http://www.exploit-db.com/exploits/32519
- http://www.securityfocus.com/bid/66474
- http://www.securitytracker.com/id/1029967
- https://exchange.xforce.ibmcloud.com/vulnerabilities/92161