CVE-2019-14851
Fixed in a distro release EPSS <1%
A denial of service vulnerability was discovered in nbdkit. A client issuing a certain sequence of commands could possibly trigger an assertion failure, causing nbdkit to exit. This issue only affected nbdkit versions 1.12.7, 1.14.1, and 1.15.1.
Products: nbdkit_project nbdkit
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | nbdkit | 1.14.2-1 |
| Debian 13 | nbdkit | 1.14.2-1 |
| Debian 14 | nbdkit | 1.14.2-1 |
| Ubuntu 16.04 LTS | nbdkit | no fix |