The Video_Converter app 0.1.0 for Nextcloud allows denial of service (CPU and memory consumption) via multiple concurrent conversions because many FFmpeg processes may be running at once. (The workload is not queued for serial execution.)
References
Link | Resource |
---|---|
https://github.com/PaulLereverend/NextcloudVideo_Converter/issues/22 | Exploit Issue Tracking Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2019-10-19 07:15
Updated : 2019-10-22 06:00
NVD link : CVE-2019-18214
Mitre link : CVE-2019-18214
JSON object : View
CWE
CWE-772
Missing Release of Resource after Effective Lifetime
Products Affected
video_converter_project
- video_converter