CVE-2021-45848

Denial of service (DoS) vulnerability in Nicotine+ 3.0.3 and later allows a user with a modified Soulseek client to crash Nicotine+ by sending a file download request with a file path containing a null character.

• CWE-116

• https://github.com/nicotine-plus/nicotine-plus/issues/1777Exploit, Issue Tracking, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HWYV53KERFH2EC4XI2IVVQFTV75E5XM6/
• https://security.gentoo.org/glsa/202210-20Third Party Advisory
• https://github.com/nicotine-plus/nicotine-plus/issues/1777Exploit, Issue Tracking, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HWYV53KERFH2EC4XI2IVVQFTV75E5XM6/
• https://security.gentoo.org/glsa/202210-20Third Party Advisory

Published

Mar 15, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-45842It is possible to obtain the first administrator's hash set …7.5
• CVE-2021-45843glFusion CMS v1.7.9 is affected by a reflected Cross Site Sc…6.1
• CVE-2021-45844Improper sanitization in the invocation of ODA File Converte…7.8
• CVE-2021-45845The Path Sanity Check script of FreeCAD 0.19 is vulnerable t…7.8
• CVE-2021-45846A flaw in the AMF parser of Slic3r libslic3r 1.3.0 allows an…5.5
• CVE-2021-45847Several missing input validations in the 3MF parser componen…5.5
• CVE-2021-45851A Server-Side Request Forgery (SSRF) attack in FUXA 1.1.3 ca…7.5
• CVE-2021-45852An issue was discovered in Projectworlds Hospital Management…5.3
• CVE-2021-45856Accu-Time Systems MAXIMUS 1.0 telnet service suffers from a …7.5
• CVE-2021-45860An integer overflow in DTSStreamReader::findFrame() of tsMux…5.5
• CVE-2021-45861There is an Assertion `num <= INT_BIT' failed at BitStreamRe…5.5
• CVE-2021-45863tsMuxer git-2678966 was discovered to contain a heap-based b…5.5