Unrated severityNVD Advisory· Published Oct 7, 2021· Updated Apr 30, 2025
CVE-2021-22930
CVE-2021-22930
Description
Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
63- osv-coords61 versionspkg:bitnami/nodepkg:bitnami/node-minpkg:rpm/almalinux/nodejspkg:rpm/almalinux/nodejs-develpkg:rpm/almalinux/nodejs-docspkg:rpm/almalinux/nodejs-full-i18npkg:rpm/almalinux/nodejs-nodemonpkg:rpm/almalinux/nodejs-packagingpkg:rpm/almalinux/npmpkg:rpm/opensuse/nodejs10&distro=openSUSE%20Leap%2015.2pkg:rpm/opensuse/nodejs10&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/nodejs10&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/nodejs12&distro=openSUSE%20Leap%2015.2pkg:rpm/opensuse/nodejs12&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/nodejs14&distro=openSUSE%20Leap%2015.2pkg:rpm/opensuse/nodejs14&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/nodejs14&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/nodejs16&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/nodejs8&distro=openSUSE%20Leap%2015.2pkg:rpm/opensuse/nodejs8&distro=openSUSE%20Leap%2015.3pkg:rpm/suse/nodejs10&distro=SUSE%20Enterprise%20Storage%206pkg:rpm/suse/nodejs10&distro=SUSE%20Enterprise%20Storage%207pkg:rpm/suse/nodejs10&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOSpkg:rpm/suse/nodejs10&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSSpkg:rpm/suse/nodejs10&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOSpkg:rpm/suse/nodejs10&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/nodejs10&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOSpkg:rpm/suse/nodejs10&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSSpkg:rpm/suse/nodejs10&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2012pkg:rpm/suse/nodejs10&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP2pkg:rpm/suse/nodejs10&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCLpkg:rpm/suse/nodejs10&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSSpkg:rpm/suse/nodejs10&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCLpkg:rpm/suse/nodejs10&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSSpkg:rpm/suse/nodejs10&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSSpkg:rpm/suse/nodejs10&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015pkg:rpm/suse/nodejs10&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1pkg:rpm/suse/nodejs10&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2pkg:rpm/suse/nodejs10&distro=SUSE%20Manager%20Proxy%204.1pkg:rpm/suse/nodejs10&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1pkg:rpm/suse/nodejs10&distro=SUSE%20Manager%20Server%204.1pkg:rpm/suse/nodejs12&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2012pkg:rpm/suse/nodejs12&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP2pkg:rpm/suse/nodejs12&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP3pkg:rpm/suse/nodejs14&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2012pkg:rpm/suse/nodejs14&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP2pkg:rpm/suse/nodejs14&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP3pkg:rpm/suse/nodejs8&distro=SUSE%20Enterprise%20Storage%206pkg:rpm/suse/nodejs8&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOSpkg:rpm/suse/nodejs8&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSSpkg:rpm/suse/nodejs8&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOSpkg:rpm/suse/nodejs8&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSSpkg:rpm/suse/nodejs8&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Web%20and%20Scripting%2015%20SP2pkg:rpm/suse/nodejs8&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCLpkg:rpm/suse/nodejs8&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSSpkg:rpm/suse/nodejs8&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSSpkg:rpm/suse/nodejs8&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015pkg:rpm/suse/nodejs8&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1pkg:rpm/suse/nodejs8&distro=SUSE%20Manager%20Proxy%204.0pkg:rpm/suse/nodejs8&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.0pkg:rpm/suse/nodejs8&distro=SUSE%20Manager%20Server%204.0
>= 12.0.0, < 12.22.4+ 60 more
- (no CPE)range: >= 12.0.0, < 12.22.4
- (no CPE)range: >= 12.0.0, < 12.22.4
- (no CPE)range: < 1:12.22.5-1.module_el8.4.0+2529+af52a4c7
- (no CPE)range: < 1:12.22.5-1.module_el8.5.0+85+79a7b441
- (no CPE)range: < 1:12.22.5-1.module_el8.4.0+2529+af52a4c7
- (no CPE)range: < 1:12.22.5-1.module_el8.5.0+85+79a7b441
- (no CPE)range: < 2.0.3-1.module_el8.4.0+2521+c668cc9f
- (no CPE)range: < 17-3.module_el8.4.0+2224+b07ac28e
- (no CPE)range: < 1:6.14.14-1.12.22.5.1.module_el8.4.0+2529+af52a4c7
- (no CPE)range: < 10.24.1-lp152.2.18.1
- (no CPE)range: < 10.24.1-150000.1.47.1
- (no CPE)range: < 10.24.1-150000.1.47.1
- (no CPE)range: < 12.22.5-lp152.3.18.1
- (no CPE)range: < 12.22.5-4.19.1
- (no CPE)range: < 14.17.5-lp152.14.1
- (no CPE)range: < 14.17.5-5.15.5
- (no CPE)range: < 14.17.5-1.2
- (no CPE)range: < 16.6.2-2.2
- (no CPE)range: < 8.17.0-lp152.3.17.1
- (no CPE)range: < 8.17.0-10.15.11
- (no CPE)range: < 10.24.1-150000.1.47.1
- (no CPE)range: < 10.24.1-150000.1.47.1
- (no CPE)range: < 10.24.1-150000.1.47.1
- (no CPE)range: < 10.24.1-150000.1.47.1
- (no CPE)range: < 10.24.1-150000.1.47.1
- (no CPE)range: < 10.24.1-150000.1.47.1
- (no CPE)range: < 10.24.1-150000.1.47.1
- (no CPE)range: < 10.24.1-150000.1.47.1
- (no CPE)range: < 10.24.1-1.42.2
- (no CPE)range: < 10.24.1-1.39.2
- (no CPE)range: < 10.24.1-150000.1.47.1
- (no CPE)range: < 10.24.1-150000.1.47.1
- (no CPE)range: < 10.24.1-150000.1.47.1
- (no CPE)range: < 10.24.1-150000.1.47.1
- (no CPE)range: < 10.24.1-150000.1.47.1
- (no CPE)range: < 10.24.1-150000.1.47.1
- (no CPE)range: < 10.24.1-150000.1.47.1
- (no CPE)range: < 10.24.1-150000.1.47.1
- (no CPE)range: < 10.24.1-150000.1.47.1
- (no CPE)range: < 10.24.1-150000.1.47.1
- (no CPE)range: < 10.24.1-150000.1.47.1
- (no CPE)range: < 12.22.5-1.35.1
- (no CPE)range: < 12.22.5-4.19.1
- (no CPE)range: < 12.22.5-4.19.1
- (no CPE)range: < 14.17.5-6.15.3
- (no CPE)range: < 14.17.5-5.15.5
- (no CPE)range: < 14.17.5-5.15.5
- (no CPE)range: < 8.17.0-3.50.1
- (no CPE)range: < 8.17.0-3.50.1
- (no CPE)range: < 8.17.0-3.50.1
- (no CPE)range: < 8.17.0-3.50.1
- (no CPE)range: < 8.17.0-3.50.1
- (no CPE)range: < 8.17.0-10.15.11
- (no CPE)range: < 8.17.0-3.50.1
- (no CPE)range: < 8.17.0-3.50.1
- (no CPE)range: < 8.17.0-3.50.1
- (no CPE)range: < 8.17.0-3.50.1
- (no CPE)range: < 8.17.0-3.50.1
- (no CPE)range: < 8.17.0-3.50.1
- (no CPE)range: < 8.17.0-3.50.1
- (no CPE)range: < 8.17.0-3.50.1
Patches
Vulnerability mechanics
References
6- security.gentoo.org/glsa/202401-02mitrevendor-advisory
- lists.debian.org/debian-lts-announce/2022/10/msg00006.htmlmitremailing-list
- cert-portal.siemens.com/productcert/pdf/ssa-389290.pdfmitre
- hackerone.com/reports/1238162mitre
- nodejs.org/en/blog/vulnerability/july-2021-security-releases-2/mitre
- security.netapp.com/advisory/ntap-20211112-0002/mitre
News mentions
0No linked articles in our index yet.