Out-of-bounds read in Node.js - CVE-2021-22918

Vulnerability identifier: #VU54624

CSH Severity: Medium

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green

CVE-ID: CVE-2021-22918

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

Affected software:
Node.js
Arch Linux
Debian Linux
Gentoo Linux
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Enterprise Storage
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for IBM z Systems
Anolis OS
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux Server - AUS
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
SUSE Linux Enterprise Module for Web Scripting
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server
openEuler
Ubuntu
App Connect Enterprise Certified Container
IBM Netcool Agile Service Manager
IBM Cloud Transformation Advisor
Rational Application Developer
IBM Spectrum Control
IBM Business Process Manager
IBM Business Automation Workflow
Cloud Pak for Security (CP4S)
IBM Cognos Controller
IBM QRadar Data Synchronization App
Planning Analytics Local
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
nodejs-nodemon
libuv1 (Debian package)
libuv1 (Ubuntu package)
dev-libs/libuv
libuv
libuv (Red Hat package)
rh-nodejs14-nodejs-nodemon (Red Hat package)
rh-nodejs12-nodejs-nodemon (Red Hat package)
v8-devel
npm
nodejs-docs
nodejs-debuginfo
nodejs-full-i18n
nodejs
nodejs-devel
nodejs-libs
nodejs-debugsource
npm10
nodejs10-docs
nodejs10
nodejs10-debuginfo
nodejs10-debugsource
nodejs10-devel
rh-nodejs12-nodejs (Red Hat package)
nodejs12
nodejs12-debuginfo
nodejs12-docs
npm12
nodejs12-devel
nodejs12-debugsource
nodejs-lts-erbium
rh-nodejs14-nodejs (Red Hat package)
nodejs14-debugsource
nodejs14-devel
npm14
nodejs14-docs
nodejs14-debuginfo
nodejs14
nodejs-lts-fermium
nodejs-packaging
IBM DataPower Gateway
Migration Toolkit for Containers
IBM App Connect Enterprise
Platform Navigator in IBM Cloud Pak for Integration (CP4I)
Asset Repository in IBM Cloud Pak for Integration (CP4I)
SINEC INS

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition in uv__idna_toascii() function in libuv, which is used to convert strings to ASCII. A remote attacker can force the application to resolve a specially crafted hostname, trigger an out-of-bounds read error and gain access to sensitive information or perform a denial of service (DoS) attack.

Install updates from vendor's website.

• https://nodejs.org/en/blog/vulnerability/july-2021-security-releases/