CVE-2021-42972: Buffer Overflow
NoMachine Server is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Server above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-42972?
CVE-2021-42972 is a vulnerability that affects NoMachine Server versions above 4.0.346 and below 7.7.4, allowing local attackers to execute arbitrary code in kernel mode or cause a denial of service.
How does CVE-2021-42972 impact NoMachine Server?
CVE-2021-42972 allows local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) in NoMachine Server.
What is the severity of CVE-2021-42972?
The severity of CVE-2021-42972 is high, with a CVSS score of 8.8.
How can I fix CVE-2021-42972?
To fix CVE-2021-42972, it is recommended to update NoMachine Server to a version above 7.7.4 or apply any available patches or mitigations provided by the vendor.
Is there any additional information about CVE-2021-42972?
For more information about CVE-2021-42972, you can refer to the following link: [https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/](https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/)