Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-22940

Fixed in a distro release EPSS 14%

Node.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.

Published 2021-08-16 · CVE record · OSV

Products: NodeJS Node

Distro releases

ReleasePackageFixed in
AlmaLinux 8nodejs1:12.22.5-1.module_el8.4.0+2529+af52a4c7
AlmaLinux 8nodejs1:12.22.5-1.module_el8.5.0+85+79a7b441
AlmaLinux 8nodejs-devel1:12.22.5-1.module_el8.5.0+85+79a7b441
AlmaLinux 8nodejs-devel1:12.22.5-1.module_el8.4.0+2529+af52a4c7
AlmaLinux 8nodejs-docs1:12.22.5-1.module_el8.4.0+2529+af52a4c7
AlmaLinux 8nodejs-full-i18n1:12.22.5-1.module_el8.5.0+85+79a7b441
AlmaLinux 8nodejs-full-i18n1:12.22.5-1.module_el8.4.0+2529+af52a4c7
AlmaLinux 8nodejs-nodemon2.0.3-1.module_el8.4.0+2521+c668cc9f
AlmaLinux 8nodejs-packaging17-3.module_el8.3.0+2023+d2377ea3
AlmaLinux 8nodejs-packaging17-3.module_el8.4.0+2521+c668cc9f
AlmaLinux 8nodejs-packaging17-3.module_el8.4.0+2224+b07ac28e
AlmaLinux 8nodejs-packaging23-3.module_el8.5.0+254+b4526b16
AlmaLinux 8nodejs-packaging23-3.module_el8.4.0+2522+3bd42762
AlmaLinux 8npm1:6.14.14-1.12.22.5.1.module_el8.4.0+2529+af52a4c7
AlmaLinux 8npm1:6.14.14-1.12.22.5.1.module_el8.5.0+85+79a7b441
Arch Linuxnodejs16.6.2-1
Debian 10nodejs10.24.0~dfsg-1~deb10u2
Debian 12nodejs12.22.5~dfsg-1
Debian 13nodejs12.22.5~dfsg-1
Debian 14nodejs12.22.5~dfsg-1
Red Hat Enterprise Linux 8nodejs1:12.22.5-1.module+el8.4.0+12242+af52a4c7
Red Hat Enterprise Linux 8nodejs1:14.17.5-1.module+el8.4.0+12247+e2879e58
Red Hat Enterprise Linux 8nodejs-debuginfo1:14.17.5-1.module+el8.4.0+12247+e2879e58
Red Hat Enterprise Linux 8nodejs-debuginfo1:12.22.5-1.module+el8.4.0+12242+af52a4c7
Red Hat Enterprise Linux 8nodejs-debugsource1:14.17.5-1.module+el8.4.0+12247+e2879e58
Red Hat Enterprise Linux 8nodejs-debugsource1:12.22.5-1.module+el8.4.0+12242+af52a4c7
Red Hat Enterprise Linux 8nodejs-devel1:14.17.5-1.module+el8.4.0+12247+e2879e58
Red Hat Enterprise Linux 8nodejs-devel1:12.22.5-1.module+el8.4.0+12242+af52a4c7
Red Hat Enterprise Linux 8nodejs-docs1:14.17.5-1.module+el8.4.0+12247+e2879e58
Red Hat Enterprise Linux 8nodejs-docs1:12.22.5-1.module+el8.4.0+12242+af52a4c7
Red Hat Enterprise Linux 8nodejs-full-i18n1:14.17.5-1.module+el8.4.0+12247+e2879e58
Red Hat Enterprise Linux 8nodejs-full-i18n1:12.22.5-1.module+el8.4.0+12242+af52a4c7
Red Hat Enterprise Linux 8nodejs-nodemon0:2.0.3-1.module+el8.3.0+6519+9f98ed83
Red Hat Enterprise Linux 8nodejs-nodemon0:2.0.3-1.module+el8.4.0+11732+c668cc9f
Red Hat Enterprise Linux 8nodejs-packaging0:23-3.module+el8.3.0+6519+9f98ed83
Red Hat Enterprise Linux 8nodejs-packaging0:17-3.module+el8.1.0+3369+37ae6a45
Red Hat Enterprise Linux 8npm1:6.14.14-1.14.17.5.1.module+el8.4.0+12247+e2879e58
Red Hat Enterprise Linux 8npm1:6.14.14-1.12.22.5.1.module+el8.4.0+12242+af52a4c7
Red Hat rhel eus 8.1nodejs1:12.22.5-1.module+el8.1.0+12238+63fe3aec
Red Hat rhel eus 8.1nodejs-debuginfo1:12.22.5-1.module+el8.1.0+12238+63fe3aec
Red Hat rhel eus 8.1nodejs-debugsource1:12.22.5-1.module+el8.1.0+12238+63fe3aec
Red Hat rhel eus 8.1nodejs-devel1:12.22.5-1.module+el8.1.0+12238+63fe3aec
Red Hat rhel eus 8.1nodejs-docs1:12.22.5-1.module+el8.1.0+12238+63fe3aec
Red Hat rhel eus 8.1nodejs-full-i18n1:12.22.5-1.module+el8.1.0+12238+63fe3aec
Red Hat rhel eus 8.1nodejs-nodemon0:1.18.3-1.module+el8.1.0+3369+37ae6a45
Red Hat rhel eus 8.1nodejs-packaging0:17-3.module+el8.1.0+3369+37ae6a45
Red Hat rhel eus 8.1npm1:6.14.14-1.12.22.5.1.module+el8.1.0+12238+63fe3aec
Red Hat rhel eus 8.2nodejs1:12.22.5-1.module+el8.2.0+12241+a3db445b
Red Hat rhel eus 8.2nodejs-debuginfo1:12.22.5-1.module+el8.2.0+12241+a3db445b
Red Hat rhel eus 8.2nodejs-debugsource1:12.22.5-1.module+el8.2.0+12241+a3db445b
Red Hat rhel eus 8.2nodejs-devel1:12.22.5-1.module+el8.2.0+12241+a3db445b
Red Hat rhel eus 8.2nodejs-docs1:12.22.5-1.module+el8.2.0+12241+a3db445b
Red Hat rhel eus 8.2nodejs-full-i18n1:12.22.5-1.module+el8.2.0+12241+a3db445b
Red Hat rhel eus 8.2nodejs-nodemon0:1.18.3-1.module+el8.1.0+3369+37ae6a45
Red Hat rhel eus 8.2nodejs-packaging0:17-3.module+el8.1.0+3369+37ae6a45
Red Hat rhel eus 8.2npm1:6.14.14-1.12.22.5.1.module+el8.2.0+12241+a3db445b
Red Hat rhel software collections 3rh-nodejs12-nodejs0:12.22.5-1.el7
Red Hat rhel software collections 3rh-nodejs12-nodejs-debuginfo0:12.22.5-1.el7
Red Hat rhel software collections 3rh-nodejs12-nodejs-devel0:12.22.5-1.el7
Red Hat rhel software collections 3rh-nodejs12-nodejs-docs0:12.22.5-1.el7
Red Hat rhel software collections 3rh-nodejs12-nodejs-nodemon0:2.0.3-5.el7
Red Hat rhel software collections 3rh-nodejs12-npm0:6.14.14-12.22.5.1.el7
Red Hat rhel software collections 3rh-nodejs14-nodejs0:14.17.5-1.el7
Red Hat rhel software collections 3rh-nodejs14-nodejs-debuginfo0:14.17.5-1.el7
Red Hat rhel software collections 3rh-nodejs14-nodejs-devel0:14.17.5-1.el7
Red Hat rhel software collections 3rh-nodejs14-nodejs-docs0:14.17.5-1.el7
Red Hat rhel software collections 3rh-nodejs14-nodejs-nodemon0:2.0.3-5.el7
Red Hat rhel software collections 3rh-nodejs14-npm0:6.14.14-14.17.5.1.el7
Rocky Linux 8nodejs1:12.22.5-1.module+el8.4.0+647+e905fa21
Rocky Linux 8nodejs1:14.17.5-1.module+el8.4.0+654+17ff1d38
Rocky Linux 8nodejs-nodemon0:2.0.3-1.module+el8.6.0+982+9fdca2d4
Rocky Linux 8nodejs-nodemon0:2.0.3-1.module+el8.3.0+100+234774f7
Rocky Linux 8nodejs-nodemon0:2.0.3-1.module+el8.4.0+638+5344c6f7
Rocky Linux 8nodejs-packaging0:23-3.module+el8.7.0+1071+4bdda2a8
Rocky Linux 8nodejs-packaging0:17-3.module+el8.3.0+101+f84c7154
Rocky Linux 8nodejs-packaging0:23-3.module+el8.5.0+733+de4fee6c
Rocky Linux 8nodejs-packaging0:23-3.module+el8.3.0+100+234774f7
SUSE Enterprise Storage 6nodejs1010.24.1-150000.1.47.1
SUSE Enterprise Storage 7nodejs1010.24.1-150000.1.47.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOSnodejs1010.24.1-150000.1.47.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSnodejs1010.24.1-150000.1.47.1
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOSnodejs1010.24.1-150000.1.47.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSnodejs1010.24.1-150000.1.47.1
SUSE Linux Enterprise High Performance Computing 15-ESPOSnodejs1010.24.1-150000.1.47.1
SUSE Linux Enterprise High Performance Computing 15-LTSSnodejs1010.24.1-150000.1.47.1
SUSE Linux Enterprise Module for Web and Scripting 12nodejs1212.22.5-1.35.1
SUSE Linux Enterprise Module for Web and Scripting 12nodejs1414.17.5-6.15.3
SUSE Linux Enterprise Module for Web and Scripting 15 SP2nodejs1212.22.5-4.19.1
SUSE Linux Enterprise Module for Web and Scripting 15 SP2nodejs1414.17.5-5.15.5
SUSE Linux Enterprise Module for Web and Scripting 15 SP3nodejs1212.22.5-4.19.1
SUSE Linux Enterprise Module for Web and Scripting 15 SP3nodejs1414.17.5-5.15.5
SUSE Linux Enterprise Server 15 SP1-BCLnodejs1010.24.1-150000.1.47.1
SUSE Linux Enterprise Server 15 SP1-LTSSnodejs1010.24.1-150000.1.47.1
SUSE Linux Enterprise Server 15 SP2-BCLnodejs1010.24.1-150000.1.47.1
SUSE Linux Enterprise Server 15 SP2-LTSSnodejs1010.24.1-150000.1.47.1
SUSE Linux Enterprise Server 15-LTSSnodejs1010.24.1-150000.1.47.1
SUSE Linux Enterprise Server for SAP Applications 15nodejs1010.24.1-150000.1.47.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1nodejs1010.24.1-150000.1.47.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2nodejs1010.24.1-150000.1.47.1
SUSE Manager Proxy 4.1nodejs1010.24.1-150000.1.47.1
SUSE Manager Retail Branch Server 4.1nodejs1010.24.1-150000.1.47.1
SUSE Manager Server 4.1nodejs1010.24.1-150000.1.47.1
Ubuntu 22.04 LTSnodejs12.22.9~dfsg-1ubuntu3.6
openSUSE Leap 15.2nodejs1212.22.5-lp152.3.18.1
openSUSE Leap 15.2nodejs1414.17.5-lp152.14.1
openSUSE Leap 15.3nodejs1010.24.1-150000.1.47.1
openSUSE Leap 15.3nodejs1212.22.5-4.19.1
openSUSE Leap 15.3nodejs1414.17.5-5.15.5
openSUSE Leap 15.4nodejs1010.24.1-150000.1.47.1
openSUSE Tumbleweednodejs1414.17.5-1.2
openSUSE Tumbleweednodejs1616.6.2-2.2