CVE-2019-18214

Published: Oct 19, 2019Modified: Jun 17, 2026

7.7

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Exploitability: 3.1 / Impact: 4.0

Source: NVD

Description

The Video_Converter app 0.1.0 for Nextcloud allows denial of service (CPU and memory consumption) via multiple concurrent conversions because many FFmpeg processes may be running at once. (The workload is not queued for serial execution.)

Affected (1)

Products: Video Converter Project: Video Converter

Video Converter Project

1 product

Video Converter

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Video Converter Project Video Converter	Version 0.1.0

Related CWEs

CWE-772

Missing Release of Resource after Effective Lifetime

The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.

References (2)

https://github.com/PaulLereverend/NextcloudVideo_Converter/issues/22

Source: cve@mitre.org

ExploitIssue TrackingThird Party Advisory

https://github.com/PaulLereverend/NextcloudVideo_Converter/issues/22

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingThird Party Advisory

Timeline

No history available yet.