NoMachine vulnerabilities

An unspecified server utility in NoMachine before version 5.3.10 on Mac OS X and Linux allows authenticated users to gain privileges by accessing local files.

The authentication mechanism controlling access to the Redis database in NoMachine uses insufficient entropy when generating credentials. A local attacker able to execute low-privileged code can exploit this to escalate privileges and execute arbitrary code in the context of the service account.

NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NoMachine without authentication. The flaw exists in the parsing of mDNS resource records due to lack of proper validation of user-supplied data length before copying to a heap-based buffer.

The vulnerability in NoMachine Device Service stems from incorrect permissions on a named pipe. A local attacker able to execute low-privileged code can exploit this flaw to escalate privileges and execute arbitrary code in the context of SYSTEM.

Vulnerability in NoMachine in the getstat service is due to lack of proper validation of a user-supplied string before using it to execute a system call. A remote authenticated attacker can exploit this flaw to execute arbitrary code in the context of the service account.

An Argument Injection vulnerability was found in NoMachine before versions 9.5.7 and 8.23.2. The flaw is due to improper neutralization of argument delimiters in a command, allowing an attacker to inject malicious arguments.

NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The flaw exists within the configuration of OpenSSL, which loads a configuration file from an unsecured location, allowing escalation to the service account.