virus logo FortiClient Vulnerability

Nodejs CVE-2021-22931 Improper Null Termination Vulnerability

description-logoDescription

Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation of host names returned by Domain Name Servers in Node.js dns library which can lead to output of wrong hostnames (leading to Domain Hijacking) and injection vulnerabilities in applications using the library.

affected-products-logoAffected Applications

Nodejs

CVE References

CVE-2021-22931

Other References

https://nodejs.org/en/blog/vulnerability/
ID 68908
Created Sep 03, 2021
Description
Updated		 Dec 15, 2023
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon
Coverage FortiClient
OS Windows
Vendor Node.js Foundation
Patch manual
Application Nodejs