CVE-2021-45848: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

Denial of service (DoS) vulnerability in Nicotine+ 3.0.3 and later allows a user with a modified Soulseek client to crash Nicotine+ by sending a file download request with a file path containing a null character.

Affected products

• Fedoraproject Fedora: version 34 only
• Nicotine-Plus Nicotine+: from 3.0.3, before 3.2.1 (fixed in 3.2.1)

Published 2022-03-15. Last modified 2026-06-17.