Lucene search

K
ubuntucveUbuntu.comUB:CVE-2019-14850
HistoryMar 18, 2021 - 12:00 a.m.

CVE-2019-14850

2021-03-1800:00:00
ubuntu.com
ubuntu.com
8

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

42.3%

A denial of service vulnerability was discovered in nbdkit 1.12.7, 1.14.1
and 1.15.1. An attacker could connect to the nbdkit service and cause it to
perform a large amount of work in initializing backend plugins, by simply
opening a connection to the service. This vulnerability could cause
resource consumption and degradation of service in nbdkit, depending on the
plugins configured on the server-side.

OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchnbdkit< anyUNKNOWN
ubuntu22.04noarchnbdkit< anyUNKNOWN
ubuntu16.04noarchnbdkit< anyUNKNOWN

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

42.3%