CVE-2019-11467

In Couchbase Server 4.6.3 and 5.5.0, secondary indexing encodes the entries to be indexed using collatejson. When index entries contain certain characters like \t, <, >, it caused buffer overrun as encoded string would be much larger than accounted for, causing indexer service to crash and restart. This has been remedied in versions 5.1.2 and 5.5.2 to ensure buffer always grows as needed for any input.

• CWE-119

• https://www.couchbase.com/resources/security#SecurityAlertsVendor Advisory
• https://www.couchbase.com/resources/security#SecurityAlertsVendor Advisory

Published

Sep 10, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-11460An issue was discovered in GNOME gnome-desktop 3.26, 3.28, a…
• CVE-2019-11461An issue was discovered in GNOME Nautilus 3.30 prior to 3.30…
• CVE-2019-11463A memory leak in archive_read_format_zip_cleanup in archive_…5.5
• CVE-2019-11464Some enterprises require that REST API endpoints include sec…6.1
• CVE-2019-11465An issue was discovered in Couchbase Server 5.5.x through 5.…5.3
• CVE-2019-11466In Couchbase Server 6.0.0 and 5.5.0, the eventing service ex…5.3
• CVE-2019-11469Zoho ManageEngine Applications Manager 12 through 14 allows …
• CVE-2019-1147A remote code execution vulnerability exists when the Window…7.8
• CVE-2019-11470The cineon parsing component in ImageMagick 7.0.8-26 Q16 all…
• CVE-2019-11471libheif 1.4.0 has a use-after-free in heif::HeifContext::Ima…
• CVE-2019-11472ReadXWDImage in coders/xwd.c in the XWD image parsing compon…
• CVE-2019-11473coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to ca…