CVE-2021-35944

Couchbase Server 6.5.x, 6.6.x through 6.6.2, and 7.0.0 has a Buffer Overflow. A specially crafted network packet sent from an attacker can crash memcached...

CVE-2021-35943

Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control. Externally managed users are not prevented from using an empty password, per RFC4513...

CVE-2021-35944

Couchbase Server 6.5.x, 6.6.x through 6.6.2, and 7.0.0 has a Buffer Overflow. A specially crafted network packet sent from an attacker can crash memcached...

CVE-2021-35944

CVE-2021-35944 affects Couchbase Server 6.5.x, 6.6.x up to 6.6.2, and 7.0.0. The issue is a buffer overflow caused by out-of-bounds access in network packet processing within memcached, which can cause memcached to crash when a crafted packet is received. Concrete technical details about affected...

CVE-2021-35943

Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control. Externally managed users are not prevented from using an empty password, per RFC4513...

CVE-2021-35943

Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control. Externally managed users are not prevented from using an empty password, per RFC4513...

CVE-2021-35943

CVE-2021-35943 affects Couchbase Server 6.5.x and 6.6.x through 6.6.2. Root cause: Incorrect Access Control that allows externally managed users to authenticate with an empty password (RFC4513). Impact per the CVE indicates potential unauthorized access with high confidentiality/integrity/availab...

CVE-2021-35945

Couchbase Server 6.5.x, 6.6.0 through 6.6.2, and 7.0.0, has a Buffer Overflow. A specially crafted network packet sent from an attacker can crash memcached...

CVE-2021-35945

CVE-2021-35945 affects Couchbase Server 6.5.x, 6.6.0–6.6.2, and 7.0.0, with a buffer overflow arising from out-of-bounds handling of network packets in memcached. An attacker can crash memcached by sending a crafted network packet. The connected documents provide concrete product/version details ...

CVE-2021-35943: Improper Authentication

Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control. Externally managed users are not prevented from using an empty password, per RFC4513...

CVE-2021-35945: Buffer Copy without Checking Size of Input

Couchbase Server 6.5.x, 6.6.0 through 6.6.2, and 7.0.0, has a Buffer Overflow. A specially crafted network packet sent from an attacker can crash memcached...

PT-2021-21071

Name of the Vulnerable Software and Affected Versions: Couchbase Server versions 6.5.x, 6.6.0 through 6.6.2, and 7.0.0 Description: A Buffer Overflow issue exists, where a specially crafted network packet sent from an attacker can crash memcached. Recommendations: For Couchbase Server versions...

PT-2021-21070

Name of the Vulnerable Software and Affected Versions: Couchbase Server versions 6.5.x through 7.0.0 Description: A Buffer Overflow issue exists, allowing a specially crafted network packet sent from an attacker to crash memcached. Recommendations: For versions 6.5.x through 7.0.0, as a temporary...

PT-2021-21069

Name of the Vulnerable Software and Affected Versions: Couchbase Server versions 6.5.x through 6.6.2 Description: The issue concerns Incorrect Access Control in Couchbase Server, where externally managed users are not prevented from using an empty password, contrary to RFC4513 guidelines...

CVE-2021-35944: Buffer Copy without Checking Size of Input

Couchbase Server 6.5.x, 6.6.x through 6.6.2, and 7.0.0 has a Buffer Overflow. A specially crafted network packet sent from an attacker can crash memcached...

Couchbase Server buffer error vulnerability

Couchbase Server is a distributed, open source NoSQL non-relational database from Couchbase, Inc. that supports data querying, full-text searching, and active global replication. Couchbase Server suffers from a buffer error vulnerability that originates from out-of-bounds access to network packet...

Couchbase Server buffer error vulnerability

Couchbase Server is a distributed, open source NoSQL non-relational database from Couchbase, Inc. that supports data querying, full-text searching, and active global replication. Couchbase Server suffers from a buffer error vulnerability that originates from out-of-bounds access to network packet...

Couchbase Server Authorization Issue Vulnerability

Couchbase Server is a distributed, open source NoSQL non-relational database from Couchbase, Inc. that supports data querying, full-text searching, and active global replication. A security vulnerability exists in Couchbase Server versions 6.5.x through 6.6.2, which stems from RFC4513 that allows...

CVE-2021-25643

An issue was discovered in Couchbase Server 5.x and 6.x before 6.5.2 and 6.6.x before 6.6.2. Internal users with administrator privileges, @cbq-engine-cbauth and @index-cbauth, leak credentials in cleartext in the indexer.log file when they make a /listCreateTokens, /listRebalanceTokens, or...

CVE-2021-25643

An issue was discovered in Couchbase Server 5.x and 6.x before 6.5.2 and 6.6.x before 6.6.2. Internal users with administrator privileges, @cbq-engine-cbauth and @index-cbauth, leak credentials in cleartext in the indexer.log file when they make a /listCreateTokens, /listRebalanceTokens, or...