CVE-2021-22883
- Source
- https://cve.org/CVERecord?id=CVE-2021-22883
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-22883.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2021-22883
- Aliases
- Downstream
- Related
- Published
- 2021-03-03T18:15:14.893Z
- Modified
- 2026-07-08T06:03:28.513353331Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unable to accept new connections and prevent the process also from opening, e.g. a file. If no file descriptor limit is configured, then this lead to an excessive memory usage and cause the system to run out of memory.
- Database specific
{ "unresolved_ranges": [ { "vendor_product": "oracle:jd_edwards_enterpriseone_tools", "source": "CPE_RANGE", "extracted_events": [ { "fixed": "9.2.6.0" } ], "cpes": [ "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*" ] }, { "vendor_product": "oracle:mysql_cluster", "source": "CPE_RANGE", "extracted_events": [ { "last_affected": "8.0.25" } ], "cpes": [ "cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*" ] }, { "vendor_product": "oracle:nosql_database", "source": "CPE_RANGE", "extracted_events": [ { "fixed": "20.3" } ], "cpes": [ "cpe:2.3:a:oracle:nosql_database:*:*:*:*:*:*:*:*" ] }, { "vendor_product": "siemens:sinec_infrastructure_network_services", "source": "CPE_RANGE", "extracted_events": [ { "fixed": "1.0.1.1" } ], "cpes": [ "cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*" ] }, { "vendor_product": "fedoraproject:fedora", "source": "CPE_STRING", "extracted_events": [ { "introduced": "32" }, { "last_affected": "32" }, { "introduced": "33" }, { "last_affected": "33" }, { "introduced": "34" }, { "last_affected": "34" } ], "cpes": [ "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*", "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*", "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*" ] }, { "vendor_product": "oracle:peoplesoft_enterprise_peopletools", "source": "CPE_STRING", "extracted_events": [ { "introduced": "8.58" }, { "last_affected": "8.58" }, { "introduced": "8.59" }, { "last_affected": "8.59" } ], "cpes": [ "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*" ] } ] }- References
-
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E4FRS5ZVK4ZQ7XIJQNGIKUXG2DJFHLO7/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F45Y7TXSU33MTKB6AGL2Q5V5ZOCNPKOG/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HSYFUGKFUSZ27M5TEZ3FKILWTWFJTFAZ/
- https://security.netapp.com/advisory/ntap-20210416-0001/
- https://hackerone.com/reports/1043360
- https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
- https://nodejs.org/en/blog/vulnerability/february-2021-security-releases/
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://www.oracle.com/security-alerts/cpuoct2021.html
Affected packages
Git / github.com/graalvm/graalvm-ce-builds
Affected ranges
- Type
- GIT
- Repo
- https://github.com/graalvm/graalvm-ce-builds
- Events
-
IntroducedLast affected
- Database specific
-
Show details
{ "source": "CPE_STRING", "cpe": [ "cpe:2.3:a:oracle:graalvm:19.3.5:*:*:*:enterprise:*:*:*", "cpe:2.3:a:oracle:graalvm:20.3.1.2:*:*:*:enterprise:*:*:*", "cpe:2.3:a:oracle:graalvm:21.0.0.2:*:*:*:enterprise:*:*:*" ], "extracted_events": [ { "introduced": "19.3.5" }, { "last_affected": "19.3.5" }, { "introduced": "20.3.1.2" }, { "last_affected": "20.3.1.2" }, { "introduced": "21.0.0.2" }, { "last_affected": "21.0.0.2" } ] }
Git / github.com/nodejs/node
Affected ranges
- Type
- GIT
- Repo
- https://github.com/nodejs/node
- Events
-
IntroducedFixedIntroducedFixedIntroducedFixedIntroducedFixed
- Database specific
-
Show details
{ "source": "CPE_RANGE", "cpe": [ "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*", "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*" ], "extracted_events": [ { "introduced": "10.0.0" }, { "fixed": "10.24.0" }, { "introduced": "12.0.0" }, { "fixed": "12.21.0" }, { "introduced": "14.0.0" }, { "fixed": "14.16.0" }, { "introduced": "15.0.0" }, { "fixed": "15.10.0" } ] }
Affected versions
v10.*
v10.0.0
v10.1.0
v10.10.0
v10.11.0
v10.12.0
v10.13.0
v10.14.0
v10.14.1
v10.14.2
v10.15.0
v10.15.1
v10.15.2
v10.15.3
v10.16.0
v10.16.1
v10.16.2
v10.16.3
v10.17.0
v10.18.0
v10.18.1
v10.19.0
v10.2.0
v10.2.1
v10.20.0
v10.20.1
v10.21.0
v10.22.0
v10.22.1
v10.23.0
v10.23.1
v10.23.2
v10.23.3
v10.3.0
v10.4.0
v10.4.1
v10.5.0
v10.6.0
v10.7.0
v10.8.0
v10.9.0
v12.*
v12.0.0
v12.1.0
v12.10.0
v12.11.0
v12.11.1
v12.12.0
v12.13.0
v12.13.1
v12.14.0
v12.14.1
v12.15.0
v12.16.0
v12.16.1
v12.16.2
v12.16.3
v12.17.0
v12.18.0
v12.18.1
v12.18.2
v12.18.3
v12.18.4
v12.19.0
v12.19.1
v12.2.0
v12.20.0
v12.20.1
v12.20.2
v12.3.0
v12.3.1
v12.4.0
v12.5.0
v12.6.0
v12.7.0
v12.8.0
v12.8.1
v12.9.0
v12.9.1
v14.*
v14.0.0
v14.1.0
v14.10.0
v14.10.1
v14.11.0
v14.12.0
v14.13.0
v14.13.1
v14.14.0
v14.15.0
v14.15.1
v14.15.2
v14.15.3
v14.15.4
v14.15.5
v14.2.0
v14.3.0
v14.4.0
v14.5.0
v14.6.0
v14.7.0
v14.8.0
v14.9.0
v15.*
v15.0.0
v15.0.1
v15.1.0
v15.2.0
v15.2.1
v15.3.0
v15.4.0
v15.5.0
v15.5.1
v15.6.0
v15.7.0
v15.8.0
v15.9.0