VYPR
← All advisories
High severity7.5NVD Advisory· Published Jun 8, 2020· Updated Jun 17, 2026

CVE-2020-9041

CVE-2020-9041

Description

In Couchbase Server 6.0.3 and Couchbase Sync Gateway through 2.7.0, the Cluster management, views, query, and full-text search endpoints are vulnerable to the Slowloris denial-of-service attack because they don't more aggressively terminate slow connections.

Affected products

5
  • Couchbase/Sync Gateway2 versions
    cpe:2.3:a:couchbase:sync_gateway:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:couchbase:sync_gateway:*:*:*:*:*:*:*:*range: <=2.7.0
    • (no CPE)range: <=2.7.0
  • Couchbase/Server2 versions
    cpe:2.3:a:couchbase:couchbase_server:6.0.3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:couchbase:couchbase_server:6.0.3:*:*:*:*:*:*:*
    • (no CPE)range: <=6.0.3
  • Couchbase/Couchbase Serverdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.