Reliance on Reverse DNS Resolution for a Security-Critical Action in Node.js - CVE-2022-43548

Vulnerability identifier: #VU69354

CSH Severity: Medium

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-43548

CWE-ID: CWE-350

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform DNS rebinding attacks.

The vulnerability exists due to improper validation of octal IP address within the Node.js rebinding protector for --inspec. A remote attacker can resolve the invalid octal address via DNS. When combined with an active --inspect session, such as when using VSCode, an attacker can perform DNS rebinding and execute arbitrary code in client's browser.

Node.js
Amazon Linux AMI
Gentoo Linux
Debian Linux
Oracle Linux
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Enterprise Storage
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for Power, little endian
Anolis OS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
SUSE Linux Enterprise Module for Web Scripting
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Server for SAP
openSUSE Leap
Ubuntu
openEuler
DB2 Warehouse on Cloud Pak for Data
DB2 on Cloud Pak for Data
Planning Analytics Cartridge for Cloud Pak for Data
Db2 Graph
IBM Planning Analytics Workspace
Answer Retrieval for Watson Discovery On Prem
IBM Cloud Pak for Watson AIOps
Dell Data Protection Central
Platform Navigator in IBM Cloud Pak for Integration (CP4I)
IBM Business Automation Workflow
IBM Watson Assistant for IBM Cloud Pak for Data
Netcool Operations Insight
IBM Cloud Transformation Advisor
IBM Watson Discovery for IBM Cloud Pak for Data
App Connect Enterprise Certified Container
IBM Spectrum Protect Plus
Automation Assets in IBM Cloud Pak for Integration (CP4I)
Cloud Pak for Security (CP4S)
IBM Cloud Pak for Multicloud Management
JD Edwards EnterpriseOne Tools
MySQL Cluster
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
nodejs-doc (Ubuntu package)
nodejs-dev (Ubuntu package)
nodejs (Ubuntu package)
nodejs-nodemon
rh-nodejs14-nodejs-nodemon (Red Hat package)
nodejs-nodemon (Red Hat package)
npm
v8-devel
libnode-dev (Ubuntu package)
libnode64 (Ubuntu package)
npm10
nodejs10
nodejs10-debuginfo
nodejs10-debugsource
nodejs10-devel
nodejs10-docs
libnode72 (Ubuntu package)
nodejs-devel
nodejs-debuginfo
nodejs-debugsource
nodejs-docs
nodejs-libs
nodejs-full-i18n
nodejs
nodejs (Debian package)
nodejs12-debugsource
nodejs12
nodejs12-docs
npm12
nodejs12-devel
nodejs12-debuginfo
rh-nodejs14-nodejs (Red Hat package)
nodejs14-docs
npm14
nodejs14-devel
nodejs14-debugsource
nodejs14-debuginfo
nodejs14
corepack14
nodejs (Red Hat package)
nodejs16-devel
nodejs16-docs
nodejs16-debugsource
nodejs16-debuginfo
nodejs16
npm16
corepack16
nodejs18
nodejs18-debuginfo
nodejs18-debugsource
nodejs18-devel
npm18
nodejs18-docs
corepack18
nodejs-packaging
IBM App Connect Enterprise
Oracle GraalVM Enterprise Edition
Voice Gateway
IBM Cognos Analytics

Install updates from vendor's website.

Node.js - addressed in versions 14.21.1, 16.18.1, 18.12.1, 19.0.1
IBM Watson Assistant for IBM Cloud Pak for Data - update to 4.6.2
Cloud Pak for Security (CP4S) - update to 1.10.15.0
IBM Cloud Pak for Multicloud Management - update to 2.3.8
JD Edwards EnterpriseOne Tools - update to 9.2.7.3
nodejs-doc (Ubuntu package) - addressed in versions Ubuntu Pro, 10.19.0~dfsg-3ubuntu1.3, 12.22.9~dfsg-1ubuntu3.2
nodejs-dev (Ubuntu package) - update to Ubuntu Pro
nodejs (Ubuntu package) - addressed in versions Ubuntu Pro, 10.19.0~dfsg-3ubuntu1.3, 12.22.9~dfsg-1ubuntu3.2
Db2 Graph - addressed in versions 1.0.0.1477-amd64, 1.0.0.1477-s390x, 1.0.0.1477-ppcle, 1.0.0.1514-amd64, 1.0.0.1514-s390x, 1.0.0.1514-ppcle
Voice Gateway - addressed in versions 1.0.8.3, 1.0.8.7
Netcool Operations Insight - update to 1.6.8
nodejs-nodemon - update to 2.0.20-2
rh-nodejs14-nodejs-nodemon (Red Hat package) - update to 2.0.20-2.el7
nodejs-nodemon (Red Hat package) - update to 2.0.20-2.el9_1
IBM Planning Analytics Workspace - update to 2.0.84
Answer Retrieval for Watson Discovery On Prem - update to 2.10.0
IBM Cloud Transformation Advisor - update to 3.4.1
IBM Cloud Pak for Watson AIOps - update to 4.1.2
IBM Watson Discovery for IBM Cloud Pak for Data - update to 4.6.2
App Connect Enterprise Certified Container - addressed in versions 5.0.3, 7.1.0
npm - update to 6.14.16-1.12.22.11.2
npm - update to 6.14.17-1.14.21.1.2.0.1
v8-devel - update to 7.8.279.23-1.12.22.11.2
IBM Spectrum Protect Plus - update to 10.1.14
libnode-dev (Ubuntu package) - addressed in versions 10.19.0~dfsg-3ubuntu1.3, 12.22.9~dfsg-1ubuntu3.2
libnode64 (Ubuntu package) - update to 10.19.0~dfsg-3ubuntu1.3
npm10 - update to 10.24.1-150000.1.53.1
nodejs10 - update to 10.24.1-150000.1.53.1
nodejs10-debuginfo - update to 10.24.1-150000.1.53.1
nodejs10-debugsource - update to 10.24.1-150000.1.53.1
nodejs10-devel - update to 10.24.1-150000.1.53.1
nodejs10-docs - update to 10.24.1-150000.1.53.1
IBM Cognos Analytics - addressed in versions 11.1.7 Fix Pack 7, 11.2.4.1 IF1
libnode72 (Ubuntu package) - update to 12.22.9~dfsg-1ubuntu3.2
nodejs-devel - update to 12.22.11-2
nodejs-debuginfo - update to 12.22.11-2
nodejs-debugsource - update to 12.22.11-2
nodejs-docs - update to 12.22.11-2
nodejs-libs - update to 12.22.11-2
nodejs-full-i18n - update to 12.22.11-2
nodejs - update to 12.22.11-2
nodejs (Debian package) - update to 12.22.12~dfsg-1~deb11u3
nodejs12-debugsource - addressed in versions 12.22.12-1.57.1, 12.22.12-150200.4.41.2
nodejs12 - addressed in versions 12.22.12-1.57.1, 12.22.12-150200.4.41.2
nodejs12-docs - addressed in versions 12.22.12-1.57.1, 12.22.12-150200.4.41.2
npm12 - addressed in versions 12.22.12-1.57.1, 12.22.12-150200.4.41.2
nodejs12-devel - addressed in versions 12.22.12-1.57.1, 12.22.12-150200.4.41.2
nodejs12-debuginfo - addressed in versions 12.22.12-1.57.1, 12.22.12-150200.4.41.2
nodejs-devel - update to 14.21.1-2.0.1
nodejs-full-i18n - update to 14.21.1-2.0.1
nodejs-docs - update to 14.21.1-2.0.1
nodejs - update to 14.21.1-2.0.1
rh-nodejs14-nodejs (Red Hat package) - update to 14.21.1-3.el7
nodejs14-docs - addressed in versions 14.21.1-6.37.1, 14.21.1-150200.15.40.2
npm14 - addressed in versions 14.21.1-6.37.1, 14.21.1-150200.15.40.2
nodejs14-devel - addressed in versions 14.21.1-6.37.1, 14.21.1-150200.15.40.2
nodejs14-debugsource - addressed in versions 14.21.1-6.37.1, 14.21.1-150200.15.40.2
nodejs14-debuginfo - addressed in versions 14.21.1-6.37.1, 14.21.1-150200.15.40.2
nodejs14 - addressed in versions 14.21.1-6.37.1, 14.21.1-150200.15.40.2
corepack14 - update to 14.21.1-150200.15.40.2
nodejs (Red Hat package) - update to 16.18.1-3.el9_1
nodejs16-devel - addressed in versions 16.18.1-8.17.1, 16.18.1-150300.7.15.1, 16.18.1-150400.3.12.1
nodejs16-docs - addressed in versions 16.18.1-8.17.1, 16.18.1-150300.7.15.1, 16.18.1-150400.3.12.1
nodejs16-debugsource - addressed in versions 16.18.1-8.17.1, 16.18.1-150300.7.15.1, 16.18.1-150400.3.12.1
nodejs16-debuginfo - addressed in versions 16.18.1-8.17.1, 16.18.1-150300.7.15.1, 16.18.1-150400.3.12.1
nodejs16 - addressed in versions 16.18.1-8.17.1, 16.18.1-150300.7.15.1, 16.18.1-150400.3.12.1
npm16 - addressed in versions 16.18.1-8.17.1, 16.18.1-150300.7.15.1, 16.18.1-150400.3.12.1
corepack16 - update to 16.18.1-150400.3.12.1
nodejs - update to 18.12.1-1
nodejs18 - addressed in versions 18.13.0-8.3.1, 18.13.0-150400.9.3.1
nodejs18-debuginfo - addressed in versions 18.13.0-8.3.1, 18.13.0-150400.9.3.1
nodejs18-debugsource - addressed in versions 18.13.0-8.3.1, 18.13.0-150400.9.3.1
nodejs18-devel - addressed in versions 18.13.0-8.3.1, 18.13.0-150400.9.3.1
npm18 - addressed in versions 18.13.0-8.3.1, 18.13.0-150400.9.3.1
nodejs18-docs - addressed in versions 18.13.0-8.3.1, 18.13.0-150400.9.3.1
corepack18 - update to 18.13.0-150400.9.3.1
Dell Data Protection Central - update to 19.10.0-4
nodejs-packaging - update to 23-3
Automation Assets in IBM Cloud Pak for Integration (CP4I) - update to 2022.2.1-5
Platform Navigator in IBM Cloud Pak for Integration (CP4I) - addressed in versions 2022.2.1-6, 2022.4.1-1

• https://nodejs.org/en/blog/vulnerability/november-2022-security-releases/

• Multiple vulnerabilities in Node.js
• SUSE update for nodejs16
• SUSE update for nodejs14
• SUSE update for nodejs12
• SUSE update for nodejs16
• SUSE update for nodejs16
• SUSE update for nodejs12
• SUSE update for nodejs14
• SUSE update for nodejs10
• Red Hat Enterprise Linux 8 update for the nodejs:18 module
• Red Hat Enterprise Linux 9 update for the nodejs:18 module
• Red Hat Enterprise Linux 8 update for the nodejs:16 module
• Multiple vulnerabilities in IBM App Connect Enterprise
• Red Hat Enterprise Linux 8 update for the nodejs:14 module
• Multiple vulnerabilities in Oracle GraalVM Enterprise Edition
• Multiple vulnerabilities in Oracle Linux
• Red Hat Enterprise Linux 9 update for nodejs and nodejs-nodemon
• Debian update for nodejs
• Reliance on Reverse DNS Resolution for a Security-Critical Action in IBM Watson Discovery Cartridge for IBM Cloud Pak for Data
• Reliance on reverse DNS resolution for a security-critical action in IBM App Connect Enterprise Certified Container
• Reliance on reverse DNS resolution for a security-critical action in IBM Voice Gateway
• Reliance on reverse DNS resolution for a security-critical action in IBM Watson Assistant for IBM Cloud Pak for Data
• Red Hat Software Collections update for rh-nodejs14-nodejs and rh-nodejs14-nodejs-nodemon
• SUSE update for nodejs18
• SUSE update for nodejs18
• Multiple vulnerabilities in IBM Business Automation Workflow Configuration Editor
• Multiple vulnerabilities in IBM Planning Analytics Workspace
• Reliance on reverse DNS resolution for a security-critical action in Platform Navigator and Automation Assets in IBM Cloud Pak for Integration
• Red Hat Enterprise Linux 8.4 Extended Update Support update for the nodejs:14 module
• Red Hat Enterprise Linux 8.6 Extended Update Support update for the nodejs:14 module
• Reliance on reverse DNS resolution for a security-critical action in IBM Db2 Graph
• Reliance on Reverse DNS Resolution for a Security-Critical Action in MySQL Cluster
• Multiple vulnerabilities in IBM Cognos Analytics
• Multiple vulnerabilities in IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data
• Multiple vulnerabilities in IBM Cloud Transformation Advisor
• Multiple vulnerabilities in JD Edwards EnterpriseOne Tools
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in IBM Cloud Pak for Security (CP4S)
• Multiple Vulnerabilities in IBM CloudPak for Watson AIOps
• Multiple vulnerabilities in IBM Planning Analytics Cartridge for IBM Cloud Pak for Data
• Multiple vulnerabilities in IBM Answer Retrieval for Watson Discovery
• Multiple vulnerabilities in IBM Spectrum Protect Plus
• Ubuntu update for nodejs
• Multiple vulnerabilities in IBM Netcool Operations Insight
• Dell Data Protection Central update for third-party components
• Multiple vulnerabilities in IBM Cloud Pak for Multicloud Management
• openEuler update for nodejs
• Gentoo update for Node.js
• Amazon Linux AMI update for nodejs
• Anolis OS update for nodejs:14 module