CVE-2021-42076

An issue was discovered in Barrier before 2.3.4. An attacker can cause memory exhaustion in the barriers component aka the server-side implementation of Barrier and barrierc by sending long TCP messages...

CVE-2021-42075

An issue was discovered in Barrier before 2.3.4. The barriers component aka the server-side implementation of Barrier does not correctly close file descriptors for established TCP connections. An unauthenticated remote attacker can thus cause file descriptor exhaustion in the server process,...

CVE-2021-42074

An issue was discovered in Barrier before 2.3.4. An unauthenticated attacker can cause a segmentation fault in the barriers component aka the server-side implementation of Barrier by quickly opening and closing TCP connections while sending a Hello message for each TCP session...

CVE-2021-42072

An issue was discovered in Barrier before 2.4.0. The barriers component aka the server-side implementation of Barrier does not sufficiently verify the identify of connecting clients. Clients can thus exploit weaknesses in the provided protocol to cause denial-of-service or stage further attacks...

CVE-2021-42073

An issue was discovered in Barrier before 2.4.0. An attacker can enter an active session state with the barriers component aka the server-side implementation of Barrier simply by supplying a client label that identifies a valid client configuration. This label is "Unnamed" by default but could...

CVE-2021-42072

An issue was discovered in Barrier before 2.4.0. The barriers component aka the server-side implementation of Barrier does not sufficiently verify the identify of connecting clients. Clients can thus exploit weaknesses in the provided protocol to cause denial-of-service or stage further attacks...

Information disclosure

An issue was discovered in Barrier before 2.3.4. The barriers component aka the server-side implementation of Barrier does not correctly close file descriptors for established TCP connections. An unauthenticated remote attacker can thus cause file descriptor exhaustion in the server process,...

Design/Logic Flaw

An issue was discovered in Barrier before 2.4.0. An attacker can enter an active session state with the barriers component aka the server-side implementation of Barrier simply by supplying a client label that identifies a valid client configuration. This label is "Unnamed" by default but could...

Design/Logic Flaw

An issue was discovered in Barrier before 2.3.4. An attacker can cause memory exhaustion in the barriers component aka the server-side implementation of Barrier and barrierc by sending long TCP messages...

CVE-2021-42074

An issue was discovered in Barrier before 2.3.4. An unauthenticated attacker can cause a segmentation fault in the barriers component aka the server-side implementation of Barrier by quickly opening and closing TCP connections while sending a Hello message for each TCP session...

Memory corruption

An issue was discovered in Barrier before 2.4.0. The barriers component aka the server-side implementation of Barrier does not sufficiently verify the identify of connecting clients. Clients can thus exploit weaknesses in the provided protocol to cause denial-of-service or stage further attacks...

Design/Logic Flaw

An issue was discovered in Barrier before 2.3.4. An unauthenticated attacker can cause a segmentation fault in the barriers component aka the server-side implementation of Barrier by quickly opening and closing TCP connections while sending a Hello message for each TCP session...

CVE-2021-42076

An issue was discovered in Barrier before 2.3.4. An attacker can cause memory exhaustion in the barriers component aka the server-side implementation of Barrier and barrierc by sending long TCP messages...

CVE-2021-42073

An issue was discovered in Barrier before 2.4.0. An attacker can enter an active session state with the barriers component aka the server-side implementation of Barrier simply by supplying a client label that identifies a valid client configuration. This label is "Unnamed" by default but could...

CVE-2021-42076

Barrier before 2.3.4 contains a memory exhaustion vulnerability in the server-side barriers component (barrierc) when processing excessively long TCP messages. Impact is availability-related due to memory exhaustion. Remediation: upgrade to Barrier 2.3.4 (see release notes). No explicit exploit d...

CVE-2021-42076

An issue was discovered in Barrier before 2.3.4. An attacker can cause memory exhaustion in the barriers component aka the server-side implementation of Barrier and barrierc by sending long TCP messages...

CVE-2021-42075

CVE-2021-42075 affects Barrier prior to version 2.3.4. The server-side Barrier component fails to correctly close file descriptors for established TCP connections, allowing an unauthenticated remote attacker to exhaust the server’s file descriptors and trigger a denial of service. Upgrading to Ba...

CVE-2021-42075

An issue was discovered in Barrier before 2.3.4. The barriers component aka the server-side implementation of Barrier does not correctly close file descriptors for established TCP connections. An unauthenticated remote attacker can thus cause file descriptor exhaustion in the server process,...

CVE-2021-42074

An issue was discovered in Barrier before 2.3.4. An unauthenticated attacker can cause a segmentation fault in the barriers component aka the server-side implementation of Barrier by quickly opening and closing TCP connections while sending a Hello message for each TCP session...

CVE-2021-42074

The CVE applies to Barrier before 2.3.4. Affected component: the server-side Barrier implementation. The issue allows an unauthenticated attacker to cause a segmentation fault by rapidly opening and closing TCP connections while sending a Hello message for each session, exploiting how Hello messa...