What is CVE-2022-42950?

CVE-2022-42950 is a medium-severity vulnerability in Couchbase Server, classified under Uncontrolled Resource Consumption. CVSS score: 4.9/10. Published 2023-02-06.

How severe is CVE-2022-42950?

Medium severity. CVSS v3 base score is 4.9 out of 10.

Resource exhaustion in Couchbase Server

CVE-2022-42950

An issue was discovered in Couchbase Server 7.x before 7.0.5 and 7.1.x before 7.1.2. A crafted HTTP REST request from an administrator account to the Couchbase Server Backup Service can exhaust memory resources, causing the process to be killed, which can be used for denial of service.

Vulnerability class: DoS (Denial of Service)

EPSS: 0.010 (57.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.9 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H.

Affected products

Couchbase Couchbase_server
N/a — versions n/a

Weakness classification (CWE)

CWE-400 — Uncontrolled Resource Consumption

References

cve@mitre.org (Issue Tracking)
cve@mitre.org (Release Notes)
cve@mitre.org (Vendor Advisory)

Frequently asked questions

What is CVE-2022-42950?: CVE-2022-42950 is a medium-severity vulnerability in Couchbase Server, classified under Uncontrolled Resource Consumption. CVSS score: 4.9/10. Published 2023-02-06.
How severe is CVE-2022-42950?: Medium severity. CVSS v3 base score is 4.9 out of 10.