CVE-2019-14851

Name of the Vulnerable Software and Affected Versions nbdkit versions 1.12.7, 1.14.1, and 1.15.1

Description A denial of service issue was discovered. A client issuing a certain sequence of commands could possibly trigger an assertion failure, causing nbdkit to exit.

Recommendations For version 1.12.7, update to a version that fixes the issue. For version 1.14.1, update to a version that fixes the issue. For version 1.15.1, update to a version that fixes the issue. As a temporary workaround, consider restricting access to nbdkit to minimize the risk of exploitation.