Risk | Medium |
Patch available | YES |
Number of vulnerabilities | 1 |
CVE-ID | CVE-2021-22884 |
CWE-ID | CWE-350 |
Exploitation vector | Network |
Public exploit | N/A |
Vulnerable software |
SUSE Linux Enterprise Module for Web Scripting Operating systems & Components / Operating system nodejs8-docs Operating systems & Components / Operating system package or component npm8 Operating systems & Components / Operating system package or component nodejs8-devel Operating systems & Components / Operating system package or component nodejs8-debugsource Operating systems & Components / Operating system package or component nodejs8-debuginfo Operating systems & Components / Operating system package or component nodejs8 Operating systems & Components / Operating system package or component |
Vendor | SUSE |
Security Bulletin
This security bulletin contains one medium risk vulnerability.
EUVDB-ID: #VU50955
Risk: Medium
CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2021-22884
CWE-ID:
CWE-350 - Reliance on Reverse DNS Resolution for a Security-Critical Action
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform DNS rebinding attack.
The vulnerability exists due to the application whitelist includes the “localhost6” name. When “localhost6” is not present in /etc/hosts, it is treated an ordinary domain that is resolved via DNS, i.e., over network. If the attacker controls the victim's DNS server or can spoof its responses, the DNS rebinding protection can be bypassed by using the “localhost6” domain.
MitigationUpdate the affected package nodejs8 to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Module for Web Scripting: 15-SP2
nodejs8-docs: before 8.17.0-10.9.2
npm8: before 8.17.0-10.9.2
nodejs8-devel: before 8.17.0-10.9.2
nodejs8-debugsource: before 8.17.0-10.9.2
nodejs8-debuginfo: before 8.17.0-10.9.2
nodejs8: before 8.17.0-10.9.2
CPE2.3https://www.suse.com/support/update/announcement/2021/suse-su-20210686-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.