DeutschShown in its original language — a full translation is planned for a future version.
Node.js: Mehrere Schwachstellen
view advisory published 2021-07-01
Ein lokaler Angreifer kann mehrere Schwachstellen in Node.js ausnutzen, um Informationen offenzulegen, seine Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuführen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-22921US | high7.8 | — | ||
Node.js before 16.4.1, 14.17.2, and 12.22.2 is vulnerable to local privilege escalation attacks under certain conditions on Windows platforms. More specifically, improper configura… | ||||
| CVE-2021-22918US | medium5.3 | — | ||
Node.js before 16.4.1, 14.17.2, 12.22.2 is vulnerable to an out-of-bounds read when uv__idna_toascii() is used to convert strings to ASCII. The pointer p is read and increased with… | ||||
| CVE-2021-23362US | medium5.3 | — | ||
The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service (ReDoS) via regular expression shortcutMatch in the fromUrl function in index.js. Th… | ||||
| CVE-2021-27290US | high7.5 | — | ||
ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression which is vulnerable to a denial of service. Malicious SRIs could take an extremely long time to process,… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2021-3075 vom 2021-08-12external
- Oracle Linux Security Advisory ELSA-2021-3623 vom 2021-09-22external
- Oracle Linux Security Advisory ELSA-2021-3666 vom 2021-09-28external
- Red Hat Security Advisory RHSA-2021:2931 vom 2021-07-28external
- Red Hat Security Advisory RHSA-2021:2932 vom 2021-07-28external
- Red Hat Security Advisory RHSA-2021:3016 vom 2021-08-06external
- Red Hat Security Advisory RHSA-2021:3073 vom 2021-08-10external
- Red Hat Security Advisory RHSA-2021:3074 vom 2021-08-10external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan