CVE-2021-42075

An issue was discovered in Barrier before 2.3.4. The barriers component aka the server-side implementation of Barrier does not correctly close file descriptors for established TCP connections. An unauthenticated remote attacker can thus cause file descriptor exhaustion in the server process,...

CVE-2021-42072

An issue was discovered in Barrier before 2.4.0. The barriers component aka the server-side implementation of Barrier does not sufficiently verify the identify of connecting clients. Clients can thus exploit weaknesses in the provided protocol to cause denial-of-service or stage further attacks...

PT-2021-23507

Name of the Vulnerable Software and Affected Versions Barrier versions prior to 2.3.4 Description An issue in the barriers component, which is the server-side implementation of Barrier, fails to correctly close file descriptors for established TCP connections. This allows an unauthenticated remot...

PT-2021-23508

Name of the Vulnerable Software and Affected Versions Barrier versions prior to 2.3.4 Description An issue allows an attacker to cause memory exhaustion in the barriers component and barrierc by sending long TCP messages. Recommendations For versions prior to 2.3.4, update to version 2.3.4 or lat...

PT-2021-23506

Name of the Vulnerable Software and Affected Versions Barrier versions prior to 2.3.4 Description An issue allows an unauthenticated attacker to cause a segmentation fault in the barriers component by quickly opening and closing TCP connections while sending a Hello message for each TCP session...

CVE-2021-42074: Use After Free

An issue was discovered in Barrier before 2.3.4. An unauthenticated attacker can cause a segmentation fault in the barriers component aka the server-side implementation of Barrier by quickly opening and closing TCP connections while sending a Hello message for each TCP session...