CVE-2021-22884

Опубликовано: 03 мар. 2021

Источник: nvd

CVSS3: 7.5

CVSS2: 5.1

EPSS Низкий

Описание

Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to DNS rebinding attacks as the whitelist includes “localhost6”. When “localhost6” is not present in /etc/hosts, it is just an ordinary domain that is resolved via DNS, i.e., over network. If the attacker controls the victim's DNS server or can spoof its responses, the DNS rebinding protection can be bypassed by using the “localhost6” domain. As long as the attacker uses the “localhost6” domain, they can still apply the attack described in CVE-2018-7160.

Ссылки

https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
Patch
Third Party Advisory
https://hackerone.com/reports/1069487
Exploit
Issue Tracking
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E4FRS5ZVK4ZQ7XIJQNGIKUXG2DJFHLO7/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F45Y7TXSU33MTKB6AGL2Q5V5ZOCNPKOG/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HSYFUGKFUSZ27M5TEZ3FKILWTWFJTFAZ/
https://nodejs.org/en/blog/vulnerability/february-2021-security-releases/
Patch
Release Notes
Vendor Advisory
https://nodejs.org/en/blog/vulnerability/march-2018-security-releases/#node-js-inspector-dns-rebinding-vulnerability-cve-2018-7160
Patch
Release Notes
Vendor Advisory
https://security.netapp.com/advisory/ntap-20210416-0001/
Third Party Advisory
https://security.netapp.com/advisory/ntap-20210723-0001/
Third Party Advisory
https://www.oracle.com//security-alerts/cpujul2021.html
Patch
Third Party Advisory
https://www.oracle.com/security-alerts/cpuApr2021.html
Patch
Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2021.html
Patch
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
Patch
Third Party Advisory
https://hackerone.com/reports/1069487
Exploit
Issue Tracking
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E4FRS5ZVK4ZQ7XIJQNGIKUXG2DJFHLO7/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F45Y7TXSU33MTKB6AGL2Q5V5ZOCNPKOG/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HSYFUGKFUSZ27M5TEZ3FKILWTWFJTFAZ/
https://nodejs.org/en/blog/vulnerability/february-2021-security-releases/
Patch
Release Notes
Vendor Advisory
https://nodejs.org/en/blog/vulnerability/march-2018-security-releases/#node-js-inspector-dns-rebinding-vulnerability-cve-2018-7160
Patch
Release Notes
Vendor Advisory
https://security.netapp.com/advisory/ntap-20210416-0001/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*

Версия от 10.0.0 (включая) до 10.24.0 (исключая)

cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*

Версия от 12.0.0 (включая) до 12.21.0 (исключая)

cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*

Версия от 14.0.0 (включая) до 14.16.0 (исключая)

cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*

Версия от 15.0.0 (включая) до 15.10.0 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*

cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*

cpe:2.3:a:netapp:e-series_performance_analyzer:-:*:*:*:*:*:*:*

cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*

cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*

cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:a:oracle:graalvm:19.3.5:*:*:*:enterprise:*:*:*

cpe:2.3:a:oracle:graalvm:20.3.1.2:*:*:*:enterprise:*:*:*

cpe:2.3:a:oracle:graalvm:21.0.0.2:*:*:*:enterprise:*:*:*

cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*

Версия до 9.2.6.0 (исключая)

cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*

Версия до 8.0.25 (включая)

cpe:2.3:a:oracle:nosql_database:*:*:*:*:*:*:*:*

Версия до 20.3 (исключая)

cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*

cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*

Конфигурация 5

cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*

Версия до 1.0.1.1 (исключая)

EPSS

Процентиль: 72%

0.00741

Низкий

7.5 High

CVSS3

5.1 Medium

CVSS2

Дефекты

CWE-350

NVD-CWE-Other

Связанные уязвимости

CVE-2021-22884

CVSS3: 7.5

ubuntu

больше 4 лет назад

CVE-2021-22884

CVSS3: 7.5

redhat

больше 4 лет назад

CVE-2021-22884

CVSS3: 7.5

debian

больше 4 лет назад

Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to ...

openSUSE-SU-2021:0389-1

suse-cvrf

больше 4 лет назад

Security update for nodejs8

SUSE-SU-2021:0686-1

suse-cvrf

больше 4 лет назад

Security update for nodejs8

EPSS

Процентиль: 72%

0.00741

Низкий

7.5 High

CVSS3

5.1 Medium

CVSS2

Дефекты

CWE-350

NVD-CWE-Other