USN-6418-1: Node.js vulnerabilities
It was discovered that Node.js incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. This issue was only fixed in Ubuntu 20.04 LTS. (CVE-2021-22883) Vít Šesták discovered that Node.js incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to execute arbitrary code. (CVE-2021-22884)
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this Node.js vulnerability?
The vulnerability ID of this Node.js vulnerability is CVE-2021-22883.
How can this Node.js vulnerability be exploited?
This Node.js vulnerability can be exploited by tricking a user or an automated system into opening a specially crafted input file, allowing a remote attacker to cause a denial of service.
Which Ubuntu version is affected by this Node.js vulnerability?
This Node.js vulnerability affects Ubuntu 20.04 LTS.
Which packages are affected by this Node.js vulnerability?
The packages affected by this Node.js vulnerability are libnode-dev, libnode64, nodejs, nodejs-dev.
How can I fix this Node.js vulnerability?
To fix this Node.js vulnerability, update the affected packages to version 10.19.0~dfsg-3ubuntu1.2 or higher.