CVE-2021-42973: Integer Overflow
Published Dec 7, 2021
·Updated
NoMachine Server is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Server above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.
Affected Software
1 affected component
NoMachine Server>4.0.346<7.7.4
Event History
Dec 7, 2021
CVE Published
via MITRE·07:24 PM
Data Sourced
via MITRE·07:24 PM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-42973?
CVE-2021-42973 is a vulnerability in NoMachine Server that allows local attackers to execute arbitrary code or cause a denial of service.
2
How does CVE-2021-42973 affect NoMachine Server?
CVE-2021-42973 affects NoMachine Server versions above 4.0.346 and below 7.7.4.
3
What is the severity of CVE-2021-42973?
CVE-2021-42973 has a severity rating of 8.8 (high).
4
How can CVE-2021-42973 be exploited?
CVE-2021-42973 can be exploited by using specially crafted I/O Request Packets.
5
Is there a fix for CVE-2021-42973?
Yes, upgrading NoMachine Server to version 7.7.4 or above will fix CVE-2021-42973.