CVE-2019-18214

2019-10-1914:15:10

Google

osv.dev

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.8%

JSON

The Video_Converter app 0.1.0 for Nextcloud allows denial of service (CPU and memory consumption) via multiple concurrent conversions because many FFmpeg processes may be running at once. (The workload is not queued for serial execution.)

CPENameOperatorVersion
nextcloudvideo_convertereq0.0.8
nextcloudvideo_convertereq0.0.11
nextcloudvideo_convertereq0.0.10
nextcloudvideo_convertereq0.0.3
nextcloudvideo_convertereq0.0.12
nextcloudvideo_convertereq0.0.6
nextcloudvideo_convertereq0.0.4
nextcloudvideo_convertereq0.0.9
nextcloudvideo_convertereq0.1.0
nextcloudvideo_convertereq0.0.2

Name	Operator	Version
nextcloudvideo_converter	eq	0.0.8
nextcloudvideo_converter	eq	0.0.11
nextcloudvideo_converter	eq	0.0.10
nextcloudvideo_converter	eq	0.0.3
nextcloudvideo_converter	eq	0.0.12
nextcloudvideo_converter	eq	0.0.6
nextcloudvideo_converter	eq	0.0.4
nextcloudvideo_converter	eq	0.0.9
nextcloudvideo_converter	eq	0.1.0
nextcloudvideo_converter	eq	0.0.2