CVE-2021-45848
Summary
| CVE | CVE-2021-45848 |
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-03-15 19:15:00 UTC |
| Updated | 2023-11-07 03:39:00 UTC |
| Description | Denial of service (DoS) vulnerability in Nicotine+ 3.0.3 and later allows a user with a modified Soulseek client to crash Nicotine+ by sending a file download request with a file path containing a null character. |
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| [SECURITY] Fedora 34 Update: nicotine+-3.2.1-1.fc34 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| [SECURITY] Fedora 34 Update: nicotine+-3.2.1-1.fc34 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| Nicotine+: Denial of Service (GLSA 202210-20) — Gentoo security |
GENTOO |
security.gentoo.org |
|
| Just crashed on Win 11 insider ring · Issue #1777 · nicotine-plus/nicotine-plus · GitHub |
MISC |
github.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 282520 Fedora Security Update for nicotine+ (FEDORA-2022-066232000e)
- 691135 Free Berkeley Software Distribution (FreeBSD) Security Update for py (e87a9326-dd35-49fc-b20b-f57cbebaae87)
- 710648 Gentoo Linux Nicotine+ Denial of Service Vulnerability (GLSA 202210-20)