In Storage Performance Development Kit (SPDK) before 19.07, a user of a vhost can cause a crash if the target is sent invalid input.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-14940.json"