CVE-2019-14850CWE-406

A denial of service vulnerability was discovered in nbdkit 1.12.7, 1.14.1 and 1.15.1

published March 18, 2021

CVSS
—
EPSS
2%
Percentile
75.6
In the wild
Unconfirmed
What it is

A denial of service vulnerability was discovered in nbdkit 1.12.7, 1.14.1 and 1.15.1. An attacker could connect to the nbdkit service and cause it to perform a large amount of work in initializing backend plugins, by simply opening a connection to the service. This vulnerability could cause resource consumption and degradation of service in nbdkit, depending on the plugins configured on the server-side.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01601 · 75.6th percentile
Weakness
CWE-406 · Insufficient Control of Network Message Volume (Network Amplification)
Published
2021-03-18T18:56Z
EPSS history
Timeline
  • 18 MAR 18:56Z
    A denial of service vulnerability was discovered in nbdkit 1.12.7, 1.14.1 and 1.15.1
    cvelistv5