Lucene search
GoogleOSV:RLSA-2021:0744HistoryMar 08, 2021 - 9:55 a.m.
Important: nodejs:14 security and bug fix update
2021-03-0809:55:44
Google
osv.dev
6
0.006 Low
EPSS
Percentile
79.4%
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.
The following packages have been upgraded to a later upstream version: nodejs (14.16.0).
Security Fix(es):
-
nodejs: HTTP2 ‘unknownProtocol’ cause DoS by resource exhaustion (CVE-2021-22883)
-
nodejs: DNS rebinding in --inspect (CVE-2021-22884)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
- Node.js should not be built with “–debug-nghttp2” (BZ#1932427)
Related
nessus
nessus
RHEL 8 : nodejs:12 (RHSA-2021:0739)
2021-03-08 00:00:00
RHEL 8 : nodejs:12 (RHSA-2021:0734)
2021-03-05 00:00:00
RHEL 7 : rh-nodejs14-nodejs (RHSA-2021:0830)
2022-09-15 00:00:00
osv
osv
nodejs vulnerabilities
2023-10-05 08:45:53
Important: nodejs:10 security update
2021-03-04 15:17:39
Important: nodejs:10 security update
2021-03-04 15:17:39
redhat
redhat
(RHSA-2021:0735) Important: nodejs:10 security update
2021-03-04 15:17:39
(RHSA-2021:0734) Important: nodejs:12 security update
2021-03-04 15:17:37
(RHSA-2021:0830) Important: rh-nodejs14-nodejs security update
2021-03-15 13:42:05
almalinux
almalinux
Important: nodejs:10 security update
2021-03-04 15:17:39
Important: nodejs:12 security update
2021-03-04 15:17:37
Important: nodejs:14 security and bug fix update
2021-03-08 09:55:44
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2021:0648-1)
2021-06-09 00:00:00
openSUSE: Security Advisory for nodejs14 (openSUSE-SU-2021:0356-1)
2021-04-16 00:00:00
Fedora: Security Advisory for nodejs (FEDORA-2021-a760169c3c)
2021-03-12 00:00:00
ibm
ibm
rocky
rocky
nodejs:14 security and bug fix update
2021-03-08 09:55:44
nodejs:12 security update
2021-03-04 15:17:37
nodejs:10 security update
2021-03-04 15:17:39
oraclelinux
oraclelinux
nodejs:12 security update
2021-03-05 00:00:00
nodejs:10 security update
2021-03-05 00:00:00
nodejs:14 security and bug fix update
2021-03-09 00:00:00
mageia
mageia
Updated nodejs packages fix security vulnerabilities
2021-03-01 02:16:12
altlinux
altlinux
Security fix for the ALT Linux 10 package node version 14.16.0-alt1
2021-02-23 00:00:00
Security fix for the ALT Linux 9 package node version 14.16.0-alt1
2021-03-16 00:00:00
suse
suse
Security update for nodejs14 (important)
2021-02-28 00:00:00
Security update for nodejs10 (important)
2021-03-03 00:00:00
Security update for nodejs12 (important)
2021-02-28 00:00:00
photon
photon
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2021-2.0-0330
2021-03-19 00:00:00
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2021-1.0-0373
2021-03-22 00:00:00
Important Photon OS Security Update - PHSA-2021-0330
2021-03-16 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: nodejs-14.16.0-1.fc33
2021-03-11 23:38:48
[SECURITY] Fedora 32 Update: nodejs-12.21.0-2.fc32
2021-03-12 00:07:47
[SECURITY] Fedora 34 Update: nodejs-14.16.0-1.fc34
2021-03-19 20:26:10
ubuntu
ubuntu
Node.js vulnerabilities
2023-10-05 00:00:00
debian
debian
[SECURITY] [DSA 4863-1] nodejs security update
2021-02-24 19:25:39
freebsd
freebsd
Node.js -- February 2021 Security Releases
2021-02-23 00:00:00
Node.js -- July 7th 2022 Security Releases
2022-07-05 00:00:00
MySQL -- Multiple vulnerabilities
2021-07-20 00:00:00
nodejsblog
nodejsblog
February 2021 Security Releases
2021-02-23 00:00:00
July 7th 2022 Security Releases
2022-07-07 00:00:00
hackerone
hackerone
Node.js: DNS rebinding in --inspect (insufficient fix of CVE-2018-7160)
2020-12-31 23:31:42
alpinelinux
alpinelinux
CVE-2021-22883
2021-03-03 18:15:14
CVE-2021-22884
2021-03-03 18:15:14
cve
cve
CVE-2021-22883
2021-03-03 18:15:14
CVE-2021-22884
2021-03-03 18:15:14
cvelist
cvelist
CVE-2021-22883
2021-03-03 17:38:32
CVE-2021-22884
2021-03-03 17:37:46
ubuntucve
ubuntucve
CVE-2021-22883
2021-03-03 00:00:00
CVE-2021-22884
2021-03-03 00:00:00
veracode
veracode
DNS Rebinding
2021-02-24 17:20:17
Denial Of Service (DoS)
2021-02-24 17:20:16
debiancve
debiancve
CVE-2021-22883
2021-03-03 18:15:14
CVE-2021-22884
2021-03-03 18:15:14
redhatcve
redhatcve
prion
prion
Design/Logic Flaw
2021-03-03 18:15:00
Code injection
2021-03-03 18:15:00
nvd
nvd
CVE-2021-22883
2021-03-03 18:15:14
CVE-2021-22884
2021-03-03 18:15:14
ics
ics
Hitachi Energy e-mesh EMS
2022-03-31 12:00:00
Siemens SINEC INS
2022-03-10 12:00:00
gentoo
gentoo
Node.js: Multiple Vulnerabilities
2024-05-08 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2021
2021-07-20 00:00:00
Oracle Critical Patch Update Advisory - April 2021
2021-04-20 00:00:00
Oracle Critical Patch Update Advisory - October 2021
2021-10-19 00:00:00