34 matches found
CVE-2026-68911
A flaw was found in nicotine-plus. A remote attacker can trigger a Denial of Service DoS by sending specially crafted, zlib-compressed peer messages containing a decompression bomb. When the recipient client decompresses the message, it exhausts available operating system memory, causing the...
CVE-2026-68911
Nicotine+ is a graphical client for the Soulseek peer-to-peer network. Prior to version 3.3.11, a modified remote client can send zlib-compressed peer messages containing a decompression bomb, exhausting available memory of the recipient's operating system. This issue has been patched in version...
CVE-2026-68911 Nicotine+: Decompression of peer messages can exhaust available memory
Nicotine+ is a graphical client for the Soulseek peer-to-peer network. Prior to version 3.3.11, a modified remote client can send zlib-compressed peer messages containing a decompression bomb, exhausting available memory of the recipient's operating system. This issue has been patched in version...
CVE-2026-68911 Nicotine+: Decompression of peer messages can exhaust available memory
Nicotine+ is a graphical client for the Soulseek peer-to-peer network. Prior to version 3.3.11, a modified remote client can send zlib-compressed peer messages containing a decompression bomb, exhausting available memory of the recipient's operating system. This issue has been patched in version...
CVE-2026-68911
The Nicotine+ graphical client for the Soulseek peer-to-peer network is vulnerable to a decompression bomb in versions prior to 3.3.11 . A modified remote client can send zlib-compressed peer messages that, when processed, exhaust the recipient's operating system memory. This issue has been addre...
EUVD-2026-88978
Nicotine+ is a graphical client for the Soulseek peer-to-peer network. Prior to version 3.3.11, a modified remote client can send zlib-compressed peer messages containing a decompression bomb, exhausting available memory of the recipient's operating system. This issue has been patched in version...
CVE-2026-68911 Nicotine+: Decompression of peer messages can exhaust available memory
Nicotine+ is a graphical client for the Soulseek peer-to-peer network. Prior to version 3.3.11, a modified remote client can send zlib-compressed peer messages containing a decompression bomb, exhausting available memory of the recipient's operating system. This issue has been patched in version...
CVE-2026-68911: Improper Handling of Highly Compressed Data (Data Amplification)
Nicotine+ is a graphical client for the Soulseek peer-to-peer network. Prior to version 3.3.11, a modified remote client can send zlib-compressed peer messages containing a decompression bomb, exhausting available memory of the recipient's operating system. This issue has been patched in version...
PT-2026-102638
Name of the Vulnerable Software and Affected Versions Nicotine+ versions prior to 3.3.11 Description A modified remote client can send zlib-compressed peer messages containing a decompression bomb, which is a malicious archive designed to crash a system by consuming excessive resources during...
PYSEC-2026-687 Nicotine+ DoS on Null Character in Download Request
Denial of service DoS vulnerability in Nicotine+ starting with version 3.0.3 and prior to version 3.2.1 allows a user with a modified Soulseek client to crash Nicotine+ by sending a file download request with a file path containing a null character...
Nicotine+ DoS on Null Character in Download Request
Denial of service DoS vulnerability in Nicotine+ starting with version 3.0.3 and prior to version 3.2.1 allows a user with a modified Soulseek client to crash Nicotine+ by sending a file download request with a file path containing a null character...
Vaping Is ‘Everywhere’ in Schools—Sparking a Bathroom Surveillance Boom
Schools in the US are installing vape-detection tech in bathrooms to thwart student nicotine and cannabis use. A new investigation reveals the impact of using spying to solve a problem...
EUVD-2022-1488
Malicious code in bioql PyPI...
FreeBSD : py-nicotine-plus -- Denial of service vulnerability (e87a9326-dd35-49fc-b20b-f57cbebaae87)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the e87a9326-dd35-49fc-b20b-f57cbebaae87 advisory. - Denial of service DoS vulnerability in Nicotine+ 3.0.3 and later allows a user with a modified Soulse...
GLSA-202210-20 : Nicotine+: Denial of Service
The remote host is affected by the vulnerability described in GLSA-202210-20 Nicotine+: Denial of Service - Denial of service DoS vulnerability in Nicotine+ 3.0.3 and later allows a user with a modified Soulseek client to crash Nicotine+ by sending a file download request with a file path...
Fedora: Security Advisory for nicotine+ (FEDORA-2022-066232000e)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 34 Update: nicotine+-3.2.1-1.fc34
Nicotine+ is a graphical client for the Soulseek peer-to-peer file sharing network. It is an attempt to keep Nicotine working with the latest libraries, kill bugs, keep current with the Soulseek protocol, and add some new features that users want and/or need...
GHSA-P4V2-R99V-WJC2 Nicotine+ DoS on Null Character in Download Request
Denial of service DoS vulnerability in Nicotine+ starting with version 3.0.3 and prior to version 3.2.1 allows a user with a modified Soulseek client to crash Nicotine+ by sending a file download request with a file path containing a null character...
Nicotine+ DoS on Null Character in Download Request
Denial of service DoS vulnerability in Nicotine+ starting with version 3.0.3 and prior to version 3.2.1 allows a user with a modified Soulseek client to crash Nicotine+ by sending a file download request with a file path containing a null character...
py-nicotine-plus -- Denial of service vulnerability
ztauras reports: Denial of service DoS vulnerability in Nicotine+ starting with version 3.0.3 and prior to version 3.2.1 allows a user with a modified Soulseek client to crash Nicotine+ by sending a file download request with a file path containing a null character...