Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-22918
HistoryJul 12, 2021 - 11:15 a.m.

Out-of-bounds

2021-07-1211:15:00
PRIOn knowledge base
www.prio-n.com
10

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.7%

Node.js before 16.4.1, 14.17.2, 12.22.2 is vulnerable to an out-of-bounds read when uv__idna_toascii() is used to convert strings to ASCII. The pointer p is read and increased without checking whether it is beyond pe, with the latter holding a pointer to the end of the buffer. This can lead to information disclosures or crashes. This function can be triggered via uv_getaddrinfo().