CVEvulnerability

CVE-2019-18214

7.7 HIGH Published 2019-10-19 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-10-19
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.7 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
CVSS 3.0 ([email protected])
7.7 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:C
Weaknesses
CWE-772

Description

The Video_Converter app 0.1.0 for Nextcloud allows denial of service (CPU and memory consumption) via multiple concurrent conversions because many FFmpeg processes may be running at once. (The workload is not queued for serial execution.)

Affected configurations

• video converter project video converter 0.1.0

Related

Weakness · CWE (1)

  • CWE-772 Missing Release of Resource after Effective Lifetime weakness

References