CVE-2014-2668

Exploit

EPSS 42.92%
Published 28.03.2014 16:51:06
Last modified 12.04.2025 10:46:40
Source cve@mitre.org
Teams watchlist Login
Open Login

Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via the count parameter to /_uuids.

Affected products Warnungen 0 Metrics 2 CWE 1 References 10

Data is provided by the National Vulnerability Database (NVD)

Apache ≫ Couchdb Version <= 1.5.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	42.92%	0.974

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://lists.opensuse.org/opensuse-updates/2014-04/msg00039.html

http://packetstormsecurity.com/files/125889

http://secunia.com/advisories/57572

Vendor Advisory

http://www.exploit-db.com/exploits/32519

Exploit

http://www.securityfocus.com/bid/66474

Exploit

http://www.securitytracker.com/id/1029967

https://exchange.xforce.ibmcloud.com/vulnerabilities/92161

https://nvd.nist.gov/vuln/detail/CVE-2014-2668

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-2668

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-2668

EUVD