In Couchbase Server 6.0.3 and Couchbase Sync Gateway through 2.7.0, the Cluster management, views, query, and full-text search endpoints are vulnerable to the Slowloris denial-of-service attack because they dont more aggressively terminate slow connections.
The product does not release or incorrectly releases a resource before it is made available for re-use.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Couchbase_server | Couchbase | 6.0.3 (including) | 6.0.3 (including) |
| Sync_gateway | Couchbase | * | 2.7.0 (including) |