NoMachine Enterprise Client is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Client above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.
References
| Link | Resource |
|---|---|
| https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/ | Exploit Technical Description Third Party Advisory |
| https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/ | Exploit Technical Description Third Party Advisory |
Configurations
History
21 Nov 2024, 06:28
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/ - Exploit, Technical Description, Third Party Advisory |
08 Dec 2021, 16:30
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:nomachine:enterprise_client:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : 7.2
v3 : 8.8 |
| CWE | CWE-120 | |
| References | (MISC) https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/ - Exploit, Technical Description, Third Party Advisory |
07 Dec 2021, 20:31
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-12-07 20:15
Updated : 2024-11-21 06:28
NVD link : CVE-2021-42983
Mitre link : CVE-2021-42983
CVE.ORG link : CVE-2021-42983
JSON object : View
Products Affected
nomachine
- enterprise_client
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')