CVE-2021-42072: Barrier Project Barrier

High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days.

An issue was discovered in Barrier before 2.4.0. The barriers component (aka the server-side implementation of Barrier) does not sufficiently verify the identify of connecting clients. Clients can thus exploit weaknesses in the provided protocol to cause denial-of-service or stage further attacks that could lead to information leaks or integrity corruption.

Affected products

• Barrier Project Barrier: before 2.4.0 (fixed in 2.4.0)
• Fedoraproject Fedora: version 34 only; version 35 only

Published 2021-11-08. Last modified 2026-06-17.