Integer Overflow Vulnerability in NoMachine Cloud Server
CVE-2021-42979

8.8HIGH

Key Information:

Vendor

Nomachine

Status
Cloud Server
Vendor
CVE Published:
7 December 2021

What is CVE-2021-42979?

The NoMachine Cloud Server is vulnerable to an Integer Overflow flaw in its IOCTL Handler 0x22001B. This vulnerability impacts versions above 4.0.346 and below 7.7.4, allowing local attackers to exploit the system by crafting specially designed I/O Request Packets. Successful exploitation can lead to arbitrary code execution in kernel mode or result in denial of service through memory corruption and potential operating system crashes.

References

https://www.sentinelone.com/labs/usb-over-ethernet-multip...
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.