rayelliott
/
barrier
mirror of https://github.com/debauchee/barrier.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
barrier/doc/newsfragments/fix-crash-on-ssl-hello.bugfix

5 lines
213 B
Plaintext
Raw Normal View History

lib/net: Fix race conditions when closing SSL connections This fixes the following security vulnerability: - CVE-2021-42074 SIGSEGV on quick open/close sequence while sending Hello message The issue has been reported by Matthias Gerstner <mgerstner@suse.de>.
2021-11-01 00:53:26 +00:00
SECURITY ISSUE
Fixed a bug which caused Barrier to crash when disconnecting a TCP session just after sending Hello message.
This bug allowed an unauthenticated attacker to crash Barrier with only network access.