The vulnerability of the Node.js software platform, related to the use of memory after it is freed, allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

🗓️ 20 Jan 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Node.js use-after-free vulnerability allows remote attackers to access data and disrupt services.

Reporter	Title	Published	Views	Family All 237
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container may be vulnerable to memory corruption due to CVE-2021-22930	20 Oct 202110:08	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability in Node.js affects IBM Cloud Pak for Multicloud Management Infrastructure Management and Managed Services	9 Nov 202118:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Integration is vulnerable to multiple Node.js vulnerabilities	15 Oct 202113:06	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, IBM WebSphere Application Server Liberty, and OpenSSL affect IBM Spectrum Control	9 Dec 202107:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in Node.js affect IBM Voice Gateway	21 Oct 202117:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Node.js	29 Oct 202121:37	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilitiy affects IBM Observability with Instana	11 Jan 202220:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Use Case Manager app is vulnerable to using components with known vulnerabilities	20 Apr 202214:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Node.js affects IBM Netcool Agile Service Manager	1 Jun 202213:37	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Node.js- CVE - 2021-22930 may affect IBM Watson Assistant for IBM Cloud Pak for Data.	25 Feb 202220:28	–	ibm

Vulners

Node

node.js node.jsRange12.0.0–12.22.4

node.js node.jsRange14.0.0–14.17.4

node.js node.jsRange16.0.0–16.6.0

ibm ibm_app_connect_enterpriseRange11.0.0.0–12.0.1.0

ibm voice_gatewayMatch1.0.7.1

ibm ibm_cloud_transformation_advisorMatch2.4.4

Source	Link
nodejs	www.nodejs.org/en/blog/vulnerability/july-2021-security-releases-2/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-22930
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-22930
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2021-1126SE17
wiki	www.wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0114SE47
ibm	www.ibm.com/support/pages/node/6498023
ibm	www.ibm.com/support/pages/node/6507409
ibm	www.ibm.com/support/pages/node/6493863
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.9/
web	www.web.nvd.nist.gov/view/vuln/detail

09 Jan 2024 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 39.8

CVSS 210

EPSS0.00323