Vulnerability-Lookup

CNVD-2021-95565

Vulnerability from cnvd - Published: 2021-12-09

Title

NoMachine Server整数溢出漏洞

Description

NoMachine是卢森堡NoMachine公司的一款远程桌面访问工具。 NoMachine Server存在安全漏洞，攻击者可利用该漏洞在内核模式下执行任意代码，或通过特制的I/O请求数据包造成拒绝服务（内存损坏和操作系统崩溃）。

Severity

高

Patch Name

NoMachine Server整数溢出漏洞的补丁

Patch Description

NoMachine是卢森堡NoMachine公司的一款远程桌面访问工具。 NoMachine Server存在安全漏洞，攻击者可利用该漏洞在内核模式下执行任意代码，或通过特制的I/O请求数据包造成拒绝服务（内存损坏和操作系统崩溃）。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/

Reference

https://nvd.nist.gov/vuln/detail/CVE-2021-42973

Impacted products

Name
NoMachine NoMachine Server >4.0.346，<7.7.4

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2021-42973"
    }
  },
  "description": "NoMachine\u662f\u5362\u68ee\u5821NoMachine\u516c\u53f8\u7684\u4e00\u6b3e\u8fdc\u7a0b\u684c\u9762\u8bbf\u95ee\u5de5\u5177\u3002\n\nNoMachine Server\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u5185\u6838\u6a21\u5f0f\u4e0b\u6267\u884c\u4efb\u610f\u4ee3\u7801\uff0c\u6216\u901a\u8fc7\u7279\u5236\u7684I/O\u8bf7\u6c42\u6570\u636e\u5305\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff08\u5185\u5b58\u635f\u574f\u548c\u64cd\u4f5c\u7cfb\u7edf\u5d29\u6e83\uff09\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2021-95565",
  "openTime": "2021-12-09",
  "patchDescription": "NoMachine\u662f\u5362\u68ee\u5821NoMachine\u516c\u53f8\u7684\u4e00\u6b3e\u8fdc\u7a0b\u684c\u9762\u8bbf\u95ee\u5de5\u5177\u3002\r\n\r\nNoMachine Server\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u5185\u6838\u6a21\u5f0f\u4e0b\u6267\u884c\u4efb\u610f\u4ee3\u7801\uff0c\u6216\u901a\u8fc7\u7279\u5236\u7684I/O\u8bf7\u6c42\u6570\u636e\u5305\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff08\u5185\u5b58\u635f\u574f\u548c\u64cd\u4f5c\u7cfb\u7edf\u5d29\u6e83\uff09\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "NoMachine Server\u6574\u6570\u6ea2\u51fa\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "NoMachine NoMachine Server \u003e4.0.346\uff0c\u003c7.7.4"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2021-42973",
  "serverity": "\u9ad8",
  "submitTime": "2021-12-08",
  "title": "NoMachine Server\u6574\u6570\u6ea2\u51fa\u6f0f\u6d1e"
}

CVE-2021-42973 (GCVE-0-2021-42973)

Vulnerability from cvelistv5 – Published: 2021-12-07 19:24 – Updated: 2024-08-04 03:47

Summary

NoMachine Server is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Server above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

https://www.sentinelone.com/labs/usb-over-etherne…

x_refsource_MISC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T03:47:12.440Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "NoMachine Server is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Server above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-12-07T19:24:08",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2021-42973",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "NoMachine Server is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Server above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/",
              "refsource": "MISC",
              "url": "https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2021-42973",
    "datePublished": "2021-12-07T19:24:08",
    "dateReserved": "2021-10-25T00:00:00",
    "dateUpdated": "2024-08-04T03:47:12.440Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2021-95565

CVE-2021-42973 (GCVE-0-2021-42973)

Tags

Sightings

Nomenclature