CVE-2020-9041

HIGH

Couchbase Server 6.0.3 and Couchbase Sync Gateway < 2.7.0 - Denial of Service via Slowloris Attack

Title source: llm

Description

In Couchbase Server 6.0.3 and Couchbase Sync Gateway through 2.7.0, the Cluster management, views, query, and full-text search endpoints are vulnerable to the Slowloris denial-of-service attack because they don't more aggressively terminate slow connections.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

https://www.couchbase.com/resources/security#SecurityAlerts

Scores

CVSS v3 7.5

EPSS 0.0128

EPSS Percentile 66.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-404

Status published

Products (2)

couchbase/couchbase_server 6.0.3

couchbase/sync_gateway < 2.7.0

Published Jun 08, 2020

Tracked Since Feb 18, 2026