CVE-2021-35945: Couchbase Server

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Couchbase Server 6.5.x, 6.6.0 through 6.6.2, and 7.0.0, has a Buffer Overflow. A specially crafted network packet sent from an attacker can crash memcached.

Affected products

• Couchbase Couchbase Server: from 4.5.0, up to and including 5.5.6; from 6.0.0, up to and including 6.0.5; from 6.5.0, up to and including 6.5.2; from 6.6.0, up to and including 6.6.2; version 7.0.0 only

Published 2021-09-29. Last modified 2026-06-17.