[PR #1350] [MERGED] Fix file descriptor leak on incomplete connections [SECURITY VULNERABILITY CVE-2021-42075] #1791

New issue

Closed

opened 2026-05-05 08:02:00 -06:00 by gitea-mirror · 0 comments

gitea-mirror commented

2026-05-05 08:02:00 -06:00

Owner

📋 Pull Request Information

Original PR: https://github.com/debauchee/barrier/pull/1350
Author: @p12tic
Created: 11/1/2021
Status: ✅ Merged
Merged: 11/1/2021
Merged by: @p12tic

Base: master ← Head: fix-file-handles-leak

📝 Commits (1)

deefecc lib/server: Close connection when client app-level handshake fails

📊 Changes

2 files changed (+11 additions, -0 deletions)

View changed files

➕ doc/newsfragments/close-failed-handshake-connections.bugfix (+6 -0)
📝 src/lib/server/ClientListener.cpp (+5 -0)

📄 Description

There was a quite simple bug of not closing file descriptors if app-level handshake fails. This leads to inability to accept further connections once the file descriptors are exhausted.

This PR fixes the following security vulnerability:

CVE-2021-42075 DoS via file descriptor exhaustion

The issue has been reported by Matthias Gerstner mgerstner@suse.de @mgerstner. Matthias also provided insights into how best to fix the issues, precise reproduction steps and any used tools and made the maintainer's life as pleasant as possible. Thank you!

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/debauchee/barrier/pull/1350 **Author:** [@p12tic](https://github.com/p12tic) **Created:** 11/1/2021 **Status:** ✅ Merged **Merged:** 11/1/2021 **Merged by:** [@p12tic](https://github.com/p12tic) **Base:** `master` ← **Head:** `fix-file-handles-leak` --- ### 📝 Commits (1) - [`deefecc`](https://github.com/debauchee/barrier/commit/deefecc262319fba9b2f2d8b470ebbc52c412575) lib/server: Close connection when client app-level handshake fails ### 📊 Changes **2 files changed** (+11 additions, -0 deletions) <details> <summary>View changed files</summary> ➕ `doc/newsfragments/close-failed-handshake-connections.bugfix` (+6 -0) 📝 `src/lib/server/ClientListener.cpp` (+5 -0) </details> ### 📄 Description There was a quite simple bug of not closing file descriptors if app-level handshake fails. This leads to inability to accept further connections once the file descriptors are exhausted. This PR fixes the following security vulnerability: - CVE-2021-42075 DoS via file descriptor exhaustion The issue has been reported by Matthias Gerstner mgerstner@suse.de @mgerstner. Matthias also provided insights into how best to fix the issues, precise reproduction steps and any used tools and made the maintainer's life as pleasant as possible. Thank you! --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>