CVE-2014-2668: Apache CouchDB

Medium severity, CVSS 5.0. EPSS: 22.7% chance of exploitation in the next 30 days.

Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via the count parameter to /_uuids.

Affected products

• Apache CouchDB: up to and including 1.5.0

Published 2014-03-28. Last modified 2026-06-17.