CVE Database›Document archive›CVE-2019-14851

CVE-2019-14851

nbdkit: assertion failure by issuing commands in the wrong order

Loading…

Severity

Moderate

Red Hat Product Security

6.5

CVSS 3.0

Review impact separately from score.

Published · September 20, 2019

Updated · June 28, 2026

Description

A denial of service vulnerability was discovered in nbdkit. A client issuing a certain sequence of commands could possibly trigger an assertion failure, causing nbdkit to exit. This issue only affected nbdkit versions 1.12.7, 1.14.1, and 1.15.1.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.0 · 6.5
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-617 · Reachable Assertion