Couchdb causes a “process flooding” with 100% cpu

2019-01-20 05:51发布

问题:

Since a few days my couchdb v1.6.1 is starting continuously new processes consuming 100% of the cpu power. After a system reboot this behavior repeats. I added a screenshot showing the situation as displayed by "top". Does anybody know what this means and where I have to search for a solution in the underlying code.

The couchdb is the remote db (ubuntu 16.04) for an angular 1.6 web app with pouch as local db.

Additional information neccessary?

system screenshot showing "top" display

回答1:

You've likely been hacked, thanks to a serious security flaw in CouchDB 1.6.1. Someone is probably mining bitcoin or similar on your server. Upgrade to CouchDB 1.7.1 or 2.1.1 or newer.