CVE-2023-43768

CWE-770 — Allocation without Limits3 documents3 sources
Severity
7.5HIGH
EPSS
0.5%
top 33.85%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Couchbase Couchbase Server
Timeline
PublishedMar 27

Description

An issue was discovered in Couchbase Server 6.6.x through 7.2.0, before 7.1.5 and 7.2.1. Unauthenticated users may cause memcached to run out of memory via large commands.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

▶NVDcouchbase/couchbase_server6.6.0 — 7.1.5+1

🔴Vulnerability Details

2
GHSA
GHSA-vwc8-vmvr-qqcf: An issue was discovered in Couchbase Server 6↗2024-03-27
▶
CVEList
CVE-2023-43768: An issue was discovered in Couchbase Server 6↗2024-03-27
▶