CVE-2021-22931

ADVISORY - nist

Summary

Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation of host names returned by Domain Name Servers in Node.js dns library which can lead to output of wrong hostnames (leading to Domain Hijacking) and injection vulnerabilities in applications using the library.

EPSS Score⁠: 0.00738 (0.719)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-170⁠

Improper Null Termination

CWE-20⁠

Improper Input Validation

ADVISORY - redhat

CWE-20⁠

Improper Input Validation

Impacted images

Advisories

Docker

CREATED

2 years ago

UPDATED

6 months ago

ADVISORY ID

BSA-2021-22931

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Docker

CREATED

4 years ago

UPDATED

9 months ago

ADVISORY ID

CVE-2021-22931

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

NIST

CREATED

4 years ago

UPDATED

9 months ago

ADVISORY IDCVE-2021-22931⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-170⁠CWE-20⁠

CVSS SCORE

9.8critical

Alpine

CREATED

4 years ago

UPDATED

27 days ago

ADVISORY IDCVE-2021-22931⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Debian

CREATED

4 years ago

UPDATED

15 days ago

ADVISORY IDCVE-2021-22931⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Ubuntu

CREATED

4 years ago

UPDATED

6 months ago

ADVISORY IDCVE-2021-22931⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

9.8medium

Alma

CREATED

4 years ago

UPDATED

4 years ago

ADVISORY IDALSA-2021:3623⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Alma

CREATED

4 years ago

UPDATED

3 years ago

ADVISORY IDALSA-2021:3666⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Bitnami

CREATED

2 years ago

UPDATED

2 years ago

ADVISORY ID

BIT-2021-22931

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Acritical

Bitnami

CREATED

1 year ago

UPDATED

5 months ago

ADVISORY ID

BIT-node-2021-22931

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

9.8critical

Bitnami

CREATED

8 months ago

UPDATED

5 months ago

ADVISORY ID

BIT-node-min-2021-22931

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

9.8critical

Red Hat

CREATED

4 years ago

UPDATED

6 months ago

ADVISORY IDCVE-2021-22931⁠

EXPLOITABILITY SCORE

1.6

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-20⁠

CVSS SCORE

5medium

Rocky

CREATED

4 years ago

UPDATED

6 months ago

ADVISORY IDRLSA-2021:3623⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Rocky

CREATED

4 years ago

UPDATED

6 months ago

ADVISORY IDRLSA-2021:3666⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Oracle

CREATED

4 years ago

UPDATED

4 years ago

ADVISORY IDELSA-2021-3623⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Oracle

CREATED

4 years ago

UPDATED

4 years ago

ADVISORY IDELSA-2021-3666⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

intheWild

CREATED

6 months ago

UPDATED

6 months ago

ADVISORY IDCVE-2021-22931⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY