CVE-2021-22883

🗓️ 03 Mar 2021 18:15:14Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 17 Views

Node.js denial of service vulnerabilit

Reporter	Title	Published	Views	Family All 224
IBM Security Bulletins	Security Bulletin: IBM API Connect is impacted by a vulnerabilities in Node.js (CVE-2021-22884, CVE-2021-22883)	1 Nov 202120:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® SDK for Node.js™ in IBM Cloud	11 Mar 202117:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in node.js may affect configuration editor used in IBM Business Automation Workflow and IBM Business Process Manager (BPM) - CVE-2020-1971, CVE-2020-8265, CVE-2020-8287	25 Mar 202110:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container may be vulnerable to multiple denial of service through the Node.js runtime	30 Apr 202113:25	–	ibm
IBM Security Bulletins	Security Bulletin: Potential vulnerability with Node.js	30 Jul 202121:10	–	ibm
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security contains security vulnerabilities	13 May 202121:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Bus & IBM App Connect Enterprise V11 are affected by vulnerabilities in Node.js (CVE-2021-22884, CVE-2021-22883)	4 Aug 202107:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is affected by multiple Node.js vulnerabilities	31 Mar 202114:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is potentially affected by multiple node vulnerabilities	21 Dec 202117:40	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability in Node.js affects IBM Cloud Automation Manager	15 May 202312:07	–	ibm

NVD

Node

nodejs node.jsRange10.0.0–10.24.0lts

OR

nodejs node.jsRange12.0.0–12.21.0lts

OR

nodejs node.jsRange14.0.0–14.16.0lts

OR

nodejs node.jsRange15.0.0–15.10.0-

Node

fedoraproject fedoraMatch32

OR

fedoraproject fedoraMatch33

OR

fedoraproject fedoraMatch34

Node

netapp e-series_performance_analyzerMatch-

Node

oracle graalvmMatch19.3.5enterprise

OR

oracle graalvmMatch20.3.1.2enterprise

OR

oracle graalvmMatch21.0.0.2enterprise

OR

oracle jd_edwards_enterpriseone_toolsRange<9.2.6.0

OR

oracle mysql_clusterRange≤8.0.25

OR

oracle nosql_databaseRange<20.3

OR

oracle peoplesoft_enterprise_peopletoolsMatch8.58

OR

oracle peoplesoft_enterprise_peopletoolsMatch8.59

Node

siemens sinec_infrastructure_network_servicesRange<1.0.1.1

Source	Link
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E4FRS5ZVK4ZQ7XIJQNGIKUXG2DJFHLO7/
hackerone	www.hackerone.com/reports/1043360
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HSYFUGKFUSZ27M5TEZ3FKILWTWFJTFAZ/
security	www.security.netapp.com/advisory/ntap-20210416-0001/
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
oracle	www.oracle.com//security-alerts/cpujul2021.html
oracle	www.oracle.com/security-alerts/cpuApr2021.html
nodejs	www.nodejs.org/en/blog/vulnerability/february-2021-security-releases/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F45Y7TXSU33MTKB6AGL2Q5V5ZOCNPKOG/
oracle	www.oracle.com/security-alerts/cpuoct2021.html

21 Nov 2024 05:50Current

CVSS 3.17.5

CVSS 27.8

EPSS0.89427

CWE-400 CWE-772

node.js denial of service vulnerability file descriptors memory usage