https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-42076.htmlhttps://patchthecve.com/cve/CVE-2021-42076.htmlWed, 17 Jun 2026 04:09:16 +0000HIGH 7.5: An issue was discovered in Barrier before 2.3.4. An attacker can cause memory exhaustion in the barriers component (aka the server-side implementation of Barrier) and barrierc by sending long TCP messages.https://patchthecve.com/cve/CVE-2021-42075.htmlhttps://patchthecve.com/cve/CVE-2021-42075.htmlWed, 17 Jun 2026 04:09:16 +0000HIGH 7.5: An issue was discovered in Barrier before 2.3.4. The barriers component (aka the server-side implementation of Barrier) does not correctly close file descriptors for established TCP connections. An unauthenticated remote attacker can thus cause file descriptor exhaustion in the server process, leadihttps://patchthecve.com/cve/CVE-2021-42074.htmlhttps://patchthecve.com/cve/CVE-2021-42074.htmlWed, 17 Jun 2026 04:09:15 +0000HIGH 7.5: An issue was discovered in Barrier before 2.3.4. An unauthenticated attacker can cause a segmentation fault in the barriers component (aka the server-side implementation of Barrier) by quickly opening and closing TCP connections while sending a Hello message for each TCP session.https://patchthecve.com/cve/CVE-2021-42073.htmlhttps://patchthecve.com/cve/CVE-2021-42073.htmlWed, 17 Jun 2026 04:09:15 +0000HIGH 8.2: An issue was discovered in Barrier before 2.4.0. An attacker can enter an active session state with the barriers component (aka the server-side implementation of Barrier) simply by supplying a client label that identifies a valid client configuration. This label is "Unnamed" by default but could inshttps://patchthecve.com/cve/CVE-2021-42072.htmlhttps://patchthecve.com/cve/CVE-2021-42072.htmlWed, 17 Jun 2026 04:09:15 +0000HIGH 8.8: An issue was discovered in Barrier before 2.4.0. The barriers component (aka the server-side implementation of Barrier) does not sufficiently verify the identify of connecting clients. Clients can thus exploit weaknesses in the provided protocol to cause denial-of-service or stage further attacks th