CVE-2019-15616 - Dangling remote share attempts in Nextcloud 16 allow a DNS pollution when running long

Back Back to CVE browser

MEDIUM

Dangling remote share attempts in Nextcloud 16 allow a DNS pollution when running long

Published Feb 4, 2020

4.3

MEDIUM

CVSS 3.1

EPSS 0.77%

Description

Dangling remote share attempts in Nextcloud 16 allow a DNS pollution when running long.

Affected products

Vendor n/a Product Nextcloud Server Default
n/a
- Version
  17.0.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Nextcloud Server

n/a

Version	Status	Constraints
17.0.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-74

CWE-93

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-6573
Advisory
https://hackerone.com/reports/592864
x_refsource_MISCPermissions Required
https://nextcloud.com/security/advisory/?id=NC-SA-2020-005
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-6573		Advisory
https://hackerone.com/reports/592864		x_refsource_MISCPermissions Required
https://nextcloud.com/security/advisory/?id=NC-SA-2020-005		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner hackerone

Published Feb 4, 2020

Updated Aug 5, 2024

Reserved Aug 26, 2019

Link CVE-2019-15616

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-15616

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-15616

ENISA EUVD

Assigner hackerone

Published Feb 4, 2020

Updated Aug 5, 2024

Exploited since n/a

Link EUVD-2019-6573

EUVD-2019-6573