CVE-2022-42950

MEDIUM

Couchbase Server 7.0.0-7.0.4 and 7.1.0-7.1.1 - Authenticated Denial of Service via Backup Service REST Request

Title source: llm

Description

An issue was discovered in Couchbase Server 7.x before 7.0.5 and 7.1.x before 7.1.2. A crafted HTTP REST request from an administrator account to the Couchbase Server Backup Service can exhaust memory resources, causing the process to be killed, which can be used for denial of service.

References (3)

Core 3

Core References

Release Notes

https://docs.couchbase.com/server/current/release-notes/relnotes.html

Issue Tracking

https://forums.couchbase.com/tags/security

Vendor Advisory

https://www.couchbase.com/alerts/

Scores

CVSS v3 4.9

EPSS 0.0096

EPSS Percentile 56.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-400

Status published

Products (1)

couchbase/couchbase_server 7.0.0 - 7.0.5

Published Feb 06, 2023

Tracked Since Feb 18, 2026