An issue was discovered in Barrier before 2.3.4. An unauthenticated attacker can cause a segmentation fault in the barriers component (aka the server-side implementation of Barrier) by quickly opening and closing TCP connections while sending a Hello message for each TCP session.

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-42074
• https://github.com/debauchee/barrier/releases/tag/v2.3.4
• http://www.openwall.com/lists/oss-security/2021/11/02/4