CVE-2021-42074

The CVE applies to Barrier before 2.3.4. Affected component: the server-side Barrier implementation. The issue allows an unauthenticated attacker to cause a segmentation fault by rapidly opening and closing TCP connections while sending a Hello message for each session, exploiting how Hello messa...

CVE-2021-42072

Affected software: Barrier (server-side component) up to version 2.4.0. Vulnerability: Barrier did not sufficiently verify connecting clients’ identities, enabling a malicious client to exploit the protocol to cause denial of service or later information leaks and integrity corruption. Impact (as...

Barrier Authorization Issues Vulnerability

Barrier is software that mimics the functionality of the Kvm switcher. Barrier suffers from an authorization problem vulnerability that can be exploited by an attacker to enter an active session state using the Barrier component by simply providing a client tag that identifies a valid client...

Barrier Authorization Problem Vulnerability (CNVD-2021-95639)

Barrier is software that mimics the functionality of a Kvm switcher. Barrier suffers from an authorization issue vulnerability that can be exploited by attackers to cause a denial of service or information disclosure...

Barrier Resource Management Error Vulnerability (CNVD-2021-95638)

Barrier is software that mimics the functionality of a Kvm switcher. Barrier suffers from a resource management error vulnerability that can be exploited by an attacker to cause a denial of service by running out of file descriptors in a server process...

Barrier 授权问题漏洞

Barrier is software that mimics the functionality of a Kvm switcher. Barrier suffers from an authorization issue vulnerability that can be exploited by attackers to cause a denial of service or information disclosure...

Barrier 缓冲区错误漏洞

Barrier is software that mimics the functionality of a Kvm switcher. Barrier suffers from a buffer overflow vulnerability that can be exploited by an attacker to send long TCP messages that can cause the Barrier component and barrierc to run out of memory...

CVE-2021-42073

CVE-2021-42073 affects Barrier before 2.4.0. An attacker can join an active Barrier server session by supplying a valid client label (default is “Unnamed,” but can be inferred from publicly available hostnames). In an active session, the attacker can capture input device events from the server an...

CVE-2021-42073

An issue was discovered in Barrier before 2.4.0. An attacker can enter an active session state with the barriers component aka the server-side implementation of Barrier simply by supplying a client label that identifies a valid client configuration. This label is "Unnamed" by default but could...

Barrier 授权问题漏洞

Barrier is software that mimics the functionality of the Kvm switcher. Barrier suffers from an authorization problem vulnerability that can be exploited by an attacker to enter an active session state using the Barrier component by simply providing a client tag that identifies a valid client...

Barrier Buffer Overflow Vulnerability

Barrier is software that mimics the functionality of a Kvm switcher. Barrier suffers from a buffer overflow vulnerability that can be exploited by an attacker to send long TCP messages that can cause the Barrier component and barrierc to run out of memory...

Barrier 资源管理错误漏洞

Barrier is a software that mimics the functionality of the Kvm switcher. A security vulnerability exists in Barrier, which stems from the fact that prior to 2.3.4 Barrier sent Hello messages for each TCP session simultaneously, which could be used by an attacker to cause a segmentation error in t...

Barrier 资源管理错误漏洞

Barrier is software that mimics the functionality of a Kvm switcher. Barrier suffers from a resource management error vulnerability that can be exploited by an attacker to cause a denial of service by running out of file descriptors in a server process...

CentOS 7 : kernel (RHSA-2021:3327)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3327 advisory. - A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down usually due to Secure Boot guest syst...

Oracle Linux 7 : kernel (ELSA-2021-3327)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-3327 advisory. - redhat: ppc64: CONFIGRTASFILTER Aristeu Rozanski 1906443 CVE-2020-27777 - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter Aristeu Rozanski...

RHEL 7 : kernel (RHSA-2021:3327)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3327 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: out-of-bounds write in...

kernel: lack a full memory barrier upon the assignment of a new table value in net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h may lead to DoS

A denial-of-service DoS flaw was identified in the Linux kernel due to an incorrect memory barrier in xtreplacetable in net/netfilter/xtables.c in the netfilter subsystem...

kernel: lack a full memory barrier upon the assignment of a new table value in net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h may lead to DoS

A denial-of-service DoS flaw was identified in the Linux kernel due to an incorrect memory barrier in xtreplacetable in net/netfilter/xtables.c in the netfilter subsystem...

IBM Sterling Secure Proxy Hardcoded Credentials Vulnerability

IBM Sterling Secure Proxy creates a security barrier for trusted networks by preventing direct connections between external partners and internal servers. IBM Sterling Secure Proxy versions 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 contain a hard-coded credential vulnerability. An attacker could use thi...

Breaking the Security Barrier of a Globally Deployed Infusion Pump

ARCHIVED STORY Overmedicated: Breaking the Security Barrier of a Globally Deployed Infusion Pump By Douglas McKee, Steve Povolny and Philippe Laulheret · August 24, 2021 Cyberattacks on medical centers are one of the most despicable forms of cyber threat there is. For instance, on October 28th,...