CVE-2021-42072

Affected software: Barrier (server-side component) up to version 2.4.0. Vulnerability: Barrier did not sufficiently verify connecting clients’ identities, enabling a malicious client to exploit the protocol to cause denial of service or later information leaks and integrity corruption. Impact (as...

CVE-2021-42073

CVE-2021-42073 affects Barrier before 2.4.0. An attacker can join an active Barrier server session by supplying a valid client label (default is “Unnamed,” but can be inferred from publicly available hostnames). In an active session, the attacker can capture input device events from the server an...

CVE-2021-42074

The CVE applies to Barrier before 2.3.4. Affected component: the server-side Barrier implementation. The issue allows an unauthenticated attacker to cause a segmentation fault by rapidly opening and closing TCP connections while sending a Hello message for each session, exploiting how Hello messa...

CVE-2021-42076

Barrier before 2.3.4 contains a memory exhaustion vulnerability in the server-side barriers component (barrierc) when processing excessively long TCP messages. Impact is availability-related due to memory exhaustion. Remediation: upgrade to Barrier 2.3.4 (see release notes). No explicit exploit d...

CVE-2021-42075

CVE-2021-42075 affects Barrier prior to version 2.3.4. The server-side Barrier component fails to correctly close file descriptors for established TCP connections, allowing an unauthenticated remote attacker to exhaust the server’s file descriptors and trigger a denial of service. Upgrading to Ba...