CVE-2021-42973

HIGH

NoMachine Server 4.0.346-7.7.4 - Integer Overflow in IOCTL Handler 0x22001B

Title source: llm

Description

NoMachine Server is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Server above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.

References (1)

Core 1

Core References

Exploit, Technical Description, Third Party Advisory x_refsource_misc

https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/

Scores

CVSS v3 8.8

EPSS 0.0048

EPSS Percentile 37.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Details

CWE

CWE-190

Status published

Products (1)

nomachine/server 4.0.346 - 7.7.4

Published Dec 07, 2021

Tracked Since Feb 18, 2026