CVE-2021-42976: Buffer Overflow
NoMachine Enterprise Desktop is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Desktop above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-42976?
The severity of CVE-2021-42976 is high with a CVSS score of 8.8.
How does CVE-2021-42976 affect NoMachine Enterprise Desktop?
CVE-2021-42976 affects NoMachine Enterprise Desktop versions above 4.0.346 and below 7.7.4, allowing local attackers to execute arbitrary code in kernel mode or cause a denial of service.
How can I fix CVE-2021-42976?
To fix CVE-2021-42976, update NoMachine Enterprise Desktop to version 7.7.4 or higher.
What is the Common Weakness Enumeration (CWE) ID associated with CVE-2021-42976?
The Common Weakness Enumeration (CWE) ID associated with CVE-2021-42976 are 119 and 120.
Where can I find more information about CVE-2021-42976?
You can find more information about CVE-2021-42976 at the following reference: https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/