{"api_version":"1","generated_at":"2026-07-23T13:47:15+00:00","cve":"CVE-2019-18214","urls":{"html":"https://cve.report/CVE-2019-18214","api":"https://cve.report/api/cve/CVE-2019-18214.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2019-18214","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-18214"},"summary":{"title":"CVE-2019-18214","description":"The Video_Converter app 0.1.0 for Nextcloud allows denial of service (CPU and memory consumption) via multiple concurrent conversions because many FFmpeg processes may be running at once. (The workload is not queued for serial execution.)","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2019-10-19 14:15:00","updated_at":"2019-10-22 13:00:00"},"problem_types":["CWE-772"],"metrics":[],"references":[{"url":"https://github.com/PaulLereverend/NextcloudVideo_Converter/issues/22","name":"https://github.com/PaulLereverend/NextcloudVideo_Converter/issues/22","refsource":"MISC","tags":["Exploit","Issue Tracking","Third Party Advisory"],"title":"Add queue support [Security Issue] · Issue #22 · PaulLereverend/NextcloudVideo_Converter · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-18214","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-18214","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2019","cve_id":"18214","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"video_converter_project","cpe5":"video_converter","cpe6":"0.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"nextcloud","cpe12":"*","cpe13":"*"},{"cve_year":"2019","cve_id":"18214","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"video_converter_project","cpe5":"video_converter","cpe6":"0.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"nextcloud","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2019-18214","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The Video_Converter app 0.1.0 for Nextcloud allows denial of service (CPU and memory consumption) via multiple concurrent conversions because many FFmpeg processes may be running at once. (The workload is not queued for serial execution.)"}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"url":"https://github.com/PaulLereverend/NextcloudVideo_Converter/issues/22","refsource":"MISC","name":"https://github.com/PaulLereverend/NextcloudVideo_Converter/issues/22"}]},"impact":{"cvss":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AC:L/AV:N/A:H/C:N/I:N/PR:L/S:C/UI:N","version":"3.0"}}},"nvd":{"publishedDate":"2019-10-19 14:15:00","lastModifiedDate":"2019-10-22 13:00:00","problem_types":["CWE-772"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.7,"baseSeverity":"HIGH"},"exploitabilityScore":3.1,"impactScore":4},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":6.8},"severity":"MEDIUM","exploitabilityScore":8,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:video_converter_project:video_converter:0.1.0:*:*:*:*:nextcloud:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2019","CveId":"18214","Ordinal":"158588","Title":"CVE-2019-18214","CVE":"CVE-2019-18214","Year":"2019"},"notes":[{"CveYear":"2019","CveId":"18214","Ordinal":"1","NoteData":"The Video_Converter app 0.1.0 for Nextcloud allows denial of service (CPU and memory consumption) via multiple concurrent conversions because many FFmpeg processes may be running at once. (The workload is not queued for serial execution.)","Type":"Description","Title":null},{"CveYear":"2019","CveId":"18214","Ordinal":"2","NoteData":"2019-10-19","Type":"Other","Title":"Published"},{"CveYear":"2019","CveId":"18214","Ordinal":"3","NoteData":"2019-10-19","Type":"Other","Title":"Modified"}]}}}