OS Command Injection

🗓️ 15 Jul 2022 10:43:40Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 43 Views

OS Command Injection vulnerability in node's 'IsIPAddress' function in 'inspector_socket.cc

Reporter	Title	Published	Views	Family All 556
IBM Security Bulletins	Security Bulletin: IBM API Connect is impacted by a vulnerabilities in Node.js (CVE-2021-22884, CVE-2021-22883)	1 Nov 202120:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® SDK for Node.js™ in IBM Cloud	11 Mar 202117:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in node.js may affect configuration editor used in IBM Business Automation Workflow and IBM Business Process Manager (BPM) - CVE-2020-1971, CVE-2020-8265, CVE-2020-8287	25 Mar 202110:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container may be vulnerable to multiple denial of service through the Node.js runtime	30 Apr 202113:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	25 Oct 202214:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in node.js	8 Aug 202217:42	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of NodeJS, IBM Cloud Pak for Multicloud Management Monitoring is vulnerable to multiple security vulnerabilities.	5 Sep 202311:07	–	ibm
IBM Security Bulletins	Security Bulletin: Potential vulnerability with Node.js	30 Jul 202121:10	–	ibm
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security contains security vulnerabilities	13 May 202121:45	–	ibm

Vulners

Node

nodejs-current nodejs-currentMatch18.0.0-r1js

AND

nodejs-current nodejs-currentMatch18.2.0-r0js

AND

nodejs-current nodejs-currentMatch18.1.0-r0js

AND

alpinelinux alpine_linuxMatch3.16

nodejs-current nodejs-currentMatch16.1.0-r0js

AND

nodejs-current nodejs-currentMatch17.6.0-r0js

AND

nodejs-current nodejs-currentMatch15.13.0-r0js

AND

nodejs-current nodejs-currentMatch13.13.0-r0js

AND

nodejs-current nodejs-currentMatch13.12.0-r1js

AND

nodejs-current nodejs-currentMatch17.4.0-r0js

AND

nodejs-current nodejs-currentMatch16.2.0-r0js

AND

nodejs-current nodejs-currentMatch17.5.0-r1js

AND

nodejs-current nodejs-currentMatch18.3.0-r1js

AND

nodejs-current nodejs-currentMatch16.0.0-r0js

AND

nodejs-current nodejs-currentMatch15.11.0-r0js

AND

nodejs-current nodejs-currentMatch18.4.0-r0js

AND

nodejs-current nodejs-currentMatch17.3.0-r0js

AND

nodejs-current nodejs-currentMatch16.5.0-r0js

AND

nodejs-current nodejs-currentMatch16.4.2-r0js

AND

nodejs-current nodejs-currentMatch14.3.0-r0js

AND

nodejs-current nodejs-currentMatch16.3.0-r0js

AND

nodejs-current nodejs-currentMatch13.12.0-r0js

AND

nodejs-current nodejs-currentMatch18.1.0-r0js

AND

nodejs-current nodejs-currentMatch16.4.0-r0js

AND

nodejs-current nodejs-currentMatch16.6.1-r0js

AND

nodejs-current nodejs-currentMatch17.7.1-r0js

AND

nodejs-current nodejs-currentMatch14.1.0-r0js

AND

nodejs-current nodejs-currentMatch14.0.0-r0js

AND

nodejs-current nodejs-currentMatch16.9.1-r0js

AND

nodejs-current nodejs-currentMatch18.5.0-r0js

AND

nodejs-current nodejs-currentMatch14.2.0-r0js

AND

nodejs-current nodejs-currentMatch17.8.0-r0js

AND

nodejs-current nodejs-currentMatch16.7.0-r0js

AND

nodejs-current nodejs-currentMatch18.3.0-r0js

AND

nodejs-current nodejs-currentMatch16.6.2-r0js

AND

nodejs-current nodejs-currentMatch15.12.0-r0js

AND

nodejs-current nodejs-currentMatch17.0.1-r0js

AND

nodejs-current nodejs-currentMatch16.10.0-r0js

AND

nodejs-current nodejs-currentMatch16.11.1-r1js

AND

nodejs-current nodejs-currentMatch15.14.0-r0js

AND

nodejs-current nodejs-currentMatch17.3.1-r0js

AND

nodejs-current nodejs-currentMatch16.8.0-r0js

AND

nodejs-current nodejs-currentMatch18.0.0-r1js

AND

nodejs-current nodejs-currentMatch18.2.0-r0js

AND

nodejs-current nodejs-currentMatch17.7.2-r0js

AND

nodejs-current nodejs-currentMatch17.2.0-r0js

AND

nodejs-current nodejs-currentMatch13.1.0-r0js

AND

nodejs-current nodejs-currentMatch13.11.0-r0js

AND

alpinelinux alpine_linuxMatchedge

nodejs nodejsMatch14.17.6-r1js

AND

nodejs nodejsMatch16.15.0-r0js

AND

nodejs nodejsMatch14.17.4-r0js

AND

nodejs nodejsMatch16.15.0-r1js

AND

nodejs nodejsMatch16.13.2-r0js

AND

nodejs nodejsMatch14.17.2-r0js

AND

nodejs nodejsMatch14.17.6-r0js

AND

nodejs nodejsMatch16.13.2-r1js

AND

nodejs nodejsMatch14.16.0-r0js

AND

nodejs nodejsMatch16.13.1-r0js

AND

nodejs nodejsMatch14.17.0-r0js

AND

nodejs nodejsMatch14.17.1-r0js

AND

nodejs nodejsMatch12.15.0-r1js

AND

nodejs nodejsMatch14.16.0-r1js

AND

nodejs nodejsMatch16.14.2-r1js

AND

nodejs nodejsMatch16.13.1-r1js

AND

nodejs nodejsMatch12.16.2-r0js

AND

nodejs nodejsMatch14.18.1-r1js

AND

nodejs nodejsMatch14.18.0-r0js

AND

nodejs nodejsMatch14.17.5-r0js

AND

nodejs nodejsMatch12.17.0-r0js

AND

nodejs nodejsMatch14.17.3-r0js

AND

nodejs nodejsMatch14.16.1-r2js

AND

nodejs nodejsMatch16.14.2-r0js

AND

alpinelinux alpine_linuxMatchedge

nodejs nodejsMatch16.14.2-r1js

AND

nodejs nodejsMatch16.15.0-r1js

AND

nodejs nodejsMatch16.15.0-r0js

AND

alpinelinux alpine_linuxMatch3.16

nodejs nodejsMatch14.17.5-r0js

AND

nodejs nodejsMatch14.17.1-r0js

AND

nodejs nodejsMatch14.19.0-r0js

AND

nodejs nodejsMatch14.17.6-r0js

AND

nodejs nodejsMatch14.17.3-r0js

AND

nodejs nodejsMatch14.17.0-r0js

AND

nodejs nodejsMatch14.18.1-r0js

AND

nodejs nodejsMatch14.17.4-r0js

AND

alpinelinux alpine_linuxMatch3.14

nodejs nodejsMatch14.16.0-r0js

AND

nodejs nodejsMatch14.16.1-r1js

AND

nodejs nodejsMatch14.17.6-r0js

AND

nodejs nodejsMatch14.18.1-r0js

AND

nodejs nodejsMatch14.17.5-r0js

AND

nodejs nodejsMatch14.17.3-r0js

AND

nodejs nodejsMatch14.17.4-r0js

AND

nodejs nodejsMatch14.19.0-r0js

AND

alpinelinux alpine_linuxMatch3.13

nodejs nodejsMatch16.13.0-r0js

AND

nodejs nodejsMatch16.14.2-r0js

AND

nodejs nodejsMatch14.18.1-r1js

AND

nodejs nodejsMatch16.13.1-r0js

AND

nodejs nodejsMatch16.13.2-r0js

AND

nodejs nodejsMatch16.14.0-r0js

AND

alpinelinux alpine_linuxMatch3.15

nodejs nodejsMatch12.19.0~dfsg-1debian

AND

debian debian_linuxMatch999

nodejs nodejsMatch10.21.0~dfsg-1~deb10u1debian

AND

nodejs nodejsMatch10.24.0~dfsg-1~deb10u1debian

AND

debian debian_linuxMatch10

nodejs nodejsMatch12.19.0~dfsg-1debian

AND

debian debian_linuxMatch11

node nodeRange17.0.0–18.4.0js

node nodeRange15.0.0–16.15.1js

node nodeRange10.0.0–14.19.3js

rh-nodejs14-nodejs rh-nodejs14-nodejsMatch14.18.2_1.el7

rh-nodejs14-nodejs rh-nodejs14-nodejsMatch14.16.0_1.el7

rh-nodejs14-nodejs rh-nodejs14-nodejsMatch14.17.5_1.el7

rh-nodejs14-nodejs rh-nodejs14-nodejsMatch14.17.2_1.el7

rh-nodejs14-nodejs rh-nodejs14-nodejsMatch14.15.4_2.el7

Source	Link
nodejs	www.nodejs.org/en/blog/vulnerability/july-2022-security-releases/
github	www.github.com/nodejs/node/commit/48c5aa5cab718d04473fa2761d532657c84b8131
github	www.github.com/nodejs/node/commit/754c9bfde06d17b37832f19b32e596f9e2ee69e3
github	www.github.com/nodejs/node/commit/e4af5eba957d23dc47497519cb9253dd2dccbeda
lists	www.lists.debian.org/debian-lts-announce/2022/10/msg00006.html
debian	www.debian.org/security/2023/dsa-5326
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/QCNN3YG2BCLS4ZEKJ3CLSUT6AS7AXTH3/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/VMQK5L5SBYD47QQZ67LEMHNQ662GH3OY/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/2ICG6CSIB3GUWH5DUSQEVX53MOJW7LYK/
github	www.github.com/advisories/GHSA-w95h-2gj2-x2p4

23 Feb 2023 21:45Current

8.2High risk

Vulners AI Score8.2

CVSS 3.18.1

EPSS0.01501