What’s Vulnerable › Vulnerabilities

CVE-2021-45848

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-03-15 · updated 2026-06-17
• Weakness: CWE-116

Description

Denial of service (DoS) vulnerability in Nicotine+ 3.0.3 and later allows a user with a modified Soulseek client to crash Nicotine+ by sending a file download request with a file path containing a null character.

Affected products

• Fedoraproject Fedora: 34
• nicotine-plus Nicotine+: from 3.0.3 before 3.2.1 — fixed in 3.2.1

How to fix

Upgrade to a fixed version: nicotine-plus Nicotine+ 3.2.1. Check the vendor advisory for mitigations.

References

• https://github.com/nicotine-plus/nicotine-plus/issues/1777
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HWYV53KERFH2EC4XI2IVVQFTV75E5XM6/
• https://security.gentoo.org/glsa/202210-20
• https://github.com/nicotine-plus/nicotine-plus/issues/1777
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HWYV53KERFH2EC4XI2IVVQFTV75E5XM6/
• https://security.gentoo.org/glsa/202210-20

Get alerted when CVE-2021-45848 or the next vulnerability affects your stack