CVE-2019-18214
Summary
| CVE | CVE-2019-18214 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-10-19 14:15:00 UTC |
| Updated | 2019-10-22 13:00:00 UTC |
| Description | The Video_Converter app 0.1.0 for Nextcloud allows denial of service (CPU and memory consumption) via multiple concurrent conversions because many FFmpeg processes may be running at once. (The workload is not queued for serial execution.) |
Risk And Classification
Problem Types: CWE-772
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Video Converter Project | Video Converter | 0.1.0 | All | All | All |
| Application | Video Converter Project | Video Converter | 0.1.0 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Add queue support [Security Issue] · Issue #22 · PaulLereverend/NextcloudVideo_Converter · GitHub | MISC | github.com | Exploit, Issue Tracking, Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.