PT-2019-15281
CVE-2019-18214
·
تاريخ النشر
2019-10-19
·
تاريخ التحديث
2019-10-22
الوصف من
CVSS 3.1
7.7
عاليةالمقاييسAC:L/AV:N/A:H/C:N/I:N/PR:L/S:C/UI:N
Name of the Vulnerable Software and Affected Versions
Video Converter app version 0.1.0 for Nextcloud
Description
The issue allows for denial of service through CPU and memory consumption by initiating multiple concurrent conversions. This happens because the workload is not queued for serial execution, potentially leading to many FFmpeg processes running simultaneously.
Recommendations
For Video Converter app version 0.1.0, consider restricting concurrent conversions to prevent excessive CPU and memory consumption until a fix is available. As a temporary workaround, limiting the number of simultaneous FFmpeg processes may help mitigate the risk of denial of service.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾