CVE-2021-42075

{"id": "CVE-2021-42075", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2021-11-08T04:15:08.590", "references": [{"url": "http://www.openwall.com/lists/oss-security/2021/11/02/4", "tags": ["Exploit", "Mailing List", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/debauchee/barrier/releases/tag/v2.3.4", "tags": ["Release Notes", "Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-772"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in Barrier before 2.3.4. The barriers component (aka the server-side implementation of Barrier) does not correctly close file descriptors for established TCP connections. An unauthenticated remote attacker can thus cause file descriptor exhaustion in the server process, leading to denial of service."}, {"lang": "es", "value": "Se ha detectado un problema en Barrier versiones anteriores a 2.3.4. El componente de barreras (tambi\u00e9n conocido como la implementaci\u00f3n del lado del servidor de Barrier) no cierra correctamente los descriptores de archivo para las conexiones TCP establecidas. Un atacante remoto no autenticado puede as\u00ed causar el agotamiento de los descriptores de archivo en el proceso del servidor, conllevando a una denegaci\u00f3n de servicio"}], "lastModified": "2022-07-12T17:42:04.277", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:barrier_project:barrier:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A6C0BAE9-F93E-42B3-8E3A-54B3FCA5D4B9", "versionEndExcluding": "2.3.4"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}