17.7. CVE-2014-2668: DoS (CPU and memory consumption) via the count parameter to /_uuids

17.7.1. Description

The /_uuids resource’s count query parameter is able to takeunreasonable huge numeric value which leads to exhaustion of server resources(CPU and memory) and to DoS as the result.

17.7.2. Mitigation

Upgrade to a supported CouchDB release that includes this fix, such as:

• 1.5.1
• 1.6.0
  All listed releases have included a specific fix to

17.7.3. Work-Around

Disable the /_uuids handler completely, by adaptinglocal.ini and restarting CouchDB:

[httpd_global_handlers]
_uuids =

原文: http://docs.couchdb.org/en/stable/cve/2014-2668.html