Описание
The Video_Converter app 0.1.0 for Nextcloud allows denial of service (CPU and memory consumption) via multiple concurrent conversions because many FFmpeg processes may be running at once. (The workload is not queued for serial execution.)
Ссылки
- ExploitIssue TrackingThird Party Advisory
- ExploitIssue TrackingThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:video_converter_project:video_converter:0.1.0:*:*:*:*:nextcloud:*:*
EPSS
Процентиль: 58%
0.00369
Низкий
7.7 High
CVSS3
7.7 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-772
Связанные уязвимости
CVSS3: 7.7
github
больше 3 лет назад
The Video_Converter app 0.1.0 for Nextcloud allows denial of service (CPU and memory consumption) via multiple concurrent conversions because many FFmpeg processes may be running at once. (The workload is not queued for serial execution.)
EPSS
Процентиль: 58%
0.00369
Низкий
7.7 High
CVSS3
7.7 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-772