NoMachine Enterprise Client is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Client above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.
References
Link | Resource |
---|---|
https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/ | Exploit Technical Description Third Party Advisory |
Configurations
History
08 Dec 2021, 16:47
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:nomachine:enterprise_client:*:*:*:*:*:*:*:* | |
References | (MISC) https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/ - Exploit, Technical Description, Third Party Advisory | |
CWE | CWE-190 | |
CVSS |
v2 : v3 : |
v2 : 7.2
v3 : 8.8 |
07 Dec 2021, 20:31
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-12-07 20:15
Updated : 2023-12-10 14:09
NVD link : CVE-2021-42986
Mitre link : CVE-2021-42986
CVE.ORG link : CVE-2021-42986
JSON object : View
Products Affected
nomachine
- enterprise_client
CWE
CWE-190
Integer Overflow or Wraparound