CVE-2022-21211

🗓️ 10 Jun 2022 20:05:45Reported by snykType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 96 Views

CVE-2022-21211 affects all versions of package posix. When invoking the toString method, it will fallback to 0x0 value, as the value of toString is not invokable, then crash with type-check

Reporter	Title	Published	Views	Family All 14
attackerkb	CVE-2022-21211	10 Jun 202220:00	–	attackerkb
Circl	CVE-2022-21211	11 Jun 202200:35	–	circl
CNNVD	posix 安全漏洞	10 Jun 202200:00	–	cnnvd
Cvelist	CVE-2022-21211 Denial of Service (DoS)	10 Jun 202220:05	–	cvelist
EUVD	EUVD-2022-5887	3 Oct 202520:07	–	euvd
Github Security Blog	Unhandled crash in npm posix	11 Jun 202200:00	–	github
NVD	CVE-2022-21211	10 Jun 202220:15	–	nvd
OSV	GHSA-27MX-GCHC-6XJP Unhandled crash in npm posix	11 Jun 202200:00	–	osv
Prion	Design/Logic Flaw	10 Jun 202220:15	–	prion
Rapid7 Vulnerability Database (full)	CVE-2022-21211: Unchecked Return Value	10 Jun 202200:00	–	rapid7

NVD

Vulners

Node

posix_project posixnode.js

[
  {
    "product": "posix",
    "vendor": "n/a",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]