CVE-2021-45848: High severity nicotine+ vulnerability
Denial of service (DoS) vulnerability in Nicotine+ 3.0.3 and later allows a user with a modified Soulseek client to crash Nicotine+ by sending a file download request with a file path containing a null character.
Other sources
Denial of service (DoS) vulnerability in Nicotine+ starting with version 3.0.3 and prior to version 3.2.1 allows a user with a modified Soulseek client to crash Nicotine+ by sending a file download request with a file path containing a null character.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2021-45848?
The severity of CVE-2021-45848 is classified as a denial of service (DoS) vulnerability allowing crashes due to specific type of requests.
How do I fix CVE-2021-45848?
To fix CVE-2021-45848, upgrade to Nicotine+ version 3.2.1 or later.
Which versions of Nicotine+ are affected by CVE-2021-45848?
CVE-2021-45848 affects Nicotine+ versions 3.0.3 through 3.2.0.
What type of attack does CVE-2021-45848 enable?
CVE-2021-45848 enables a denial of service (DoS) attack where a modified Soulseek client can crash Nicotine+.
What environments are impacted by CVE-2021-45848?
CVE-2021-45848 impacts users of Nicotine+ in various environments, especially those running version 3.0.3 to 3.2.0.