CVE-2021-22930

🗓️ 07 Oct 2021 00:00:00Reported by hackeroneType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 283 Views

Node.js before 16.6.0, 14.17.4, and 12.22.4 use-after-free vulnerabilit

Reporter	Title	Published	Views	Family All 237
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container may be vulnerable to memory corruption due to CVE-2021-22930	20 Oct 202110:08	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability in Node.js affects IBM Cloud Pak for Multicloud Management Infrastructure Management and Managed Services	9 Nov 202118:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Integration is vulnerable to multiple Node.js vulnerabilities	15 Oct 202113:06	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, IBM WebSphere Application Server Liberty, and OpenSSL affect IBM Spectrum Control	9 Dec 202107:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in Node.js affect IBM Voice Gateway	21 Oct 202117:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Node.js	29 Oct 202121:37	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilitiy affects IBM Observability with Instana	11 Jan 202220:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Use Case Manager app is vulnerable to using components with known vulnerabilities	20 Apr 202214:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Node.js affects IBM Netcool Agile Service Manager	1 Jun 202213:37	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Node.js- CVE - 2021-22930 may affect IBM Watson Assistant for IBM Cloud Pak for Data.	25 Feb 202220:28	–	ibm

NVD

Vulners

Node

nodejs node.jsRange12.0.0–12.22.4lts

nodejs node.jsRange14.0.0–14.17.4lts

nodejs node.jsRange16.0.0–16.6.0-

Node

netapp nextgen_apiMatch-

Node

siemens sinec_infrastructure_network_servicesRange<1.0.1.1

Node

debian debian_linuxMatch10.0

[
  {
    "product": "Node",
    "vendor": "NodeJS",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "versionType": "semver",
        "version": "4.0",
        "status": "affected",
        "lessThan": "4.*"
      },
      {
        "versionType": "semver",
        "version": "5.0",
        "status": "affected",
        "lessThan": "5.*"
      },
      {
        "versionType": "semver",
        "version": "6.0",
        "status": "affected",
        "lessThan": "6.*"
      },
      {
        "versionType": "semver",
        "version": "7.0",
        "status": "affected",
        "lessThan": "7.*"
      },
      {
        "versionType": "semver",
        "version": "8.0",
        "status": "affected",
        "lessThan": "8.*"
      },
      {
        "versionType": "semver",
        "version": "9.0",
        "status": "affected",
        "lessThan": "9.*"
      },
      {
        "versionType": "semver",
        "version": "10.0",
        "status": "affected",
        "lessThan": "10.*"
      },
      {
        "versionType": "semver",
        "version": "11.0",
        "status": "affected",
        "lessThan": "11.*"
      },
      {
        "versionType": "semver",
        "version": "12.0",
        "status": "affected",
        "lessThan": "12.22.4"
      },
      {
        "versionType": "semver",
        "version": "13.0",
        "status": "affected",
        "lessThan": "13.*"
      },
      {
        "versionType": "semver",
        "version": "14.0",
        "status": "affected",
        "lessThan": "14.17.4"
      },
      {
        "versionType": "semver",
        "version": "15.0",
        "status": "affected",
        "lessThan": "15.*"
      },
      {
        "versionType": "semver",
        "version": "16.0",
        "status": "affected",
        "lessThan": "16.6.0"
      }
    ]
  }
]

Source	Link
security	www.security.netapp.com/advisory/ntap-20211112-0002/
hackerone	www.hackerone.com/reports/1238162
lists	www.lists.debian.org/debian-lts-announce/2022/10/msg00006.html
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
nodejs	www.nodejs.org/en/blog/vulnerability/july-2021-security-releases-2/
security	www.security.gentoo.org/glsa/202401-02

30 Apr 2025 22:24Current

9.4High risk

Vulners AI Score9.4

CVSS 27.5

CVSS 3.19.8

EPSS0.00323

CWE-416