CVE-2021-42075
HIGHBarrier < 2.3.4 - Resource Leak
Title source: ruleDescription
An issue was discovered in Barrier before 2.3.4. The barriers component (aka the server-side implementation of Barrier) does not correctly close file descriptors for established TCP connections. An unauthenticated remote attacker can thus cause file descriptor exhaustion in the server process, leading to denial of service.
Scores
CVSS v3
7.5
EPSS
0.0089
EPSS Percentile
75.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Classification
CWE
CWE-772
Status
published
Affected Products (1)
barrier_project/barrier
< 2.3.4
Timeline
Published
Nov 08, 2021
Tracked Since
Feb 18, 2026