Unscored CVE-2019-14851 EUVD-2019-5974GHSA-hj75-x8cx-fm4w

A denial of service vulnerability was discovered in nbdkit. A client issuing a certain sequence of commands could possibly trigger an asser…

Published Mar 18, 2021 · Updated Aug 5, 2024 · Assigned by redhat

Package: nbdkit Package: nbdkit Ecosystem: Debian Ecosystem: Ubuntu

Description

A denial of service vulnerability was discovered in nbdkit. A client issuing a certain sequence of commands could possibly trigger an assertion failure, causing nbdkit to exit. This issue only affected nbdkit versions 1.12.7, 1.14.1, and 1.15.1.

Affected products

Vendor	Product	Affected	Fixed
—	nbdkit	nbdkit 1.12.8, nbdkit 1.14.2, nbdkit 1.15.2	—

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	nbdkit	1.14.2-1	—
Debian 13	nbdkit	1.14.2-1	—
Debian 12	nbdkit	1.14.2-1	—

Ubuntu