https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 22:36:44 +0000 https://vulnerability.circl.lu/vuln/cve-2021-22883 <p><strong>Affected:</strong> NodeJS Node</p> <p>Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an &#39;unknownProtocol&#39; are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unable to accept new connections and prevent the process also from opening, e.g. a file. If no file descriptor limit is configured, then this lead to an excessive memory usage and cause the system to run out of memory.</p> <p><strong>Affected:</strong> NodeJS Node</p> <p>Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an &#39;unknownProtocol&#39; are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unable to accept new connections and prevent the process also from opening, e.g. a file. If no file descriptor limit is configured, then this lead to an excessive memory usage and cause the system to run out of memory.</p> https://vulnerability.circl.lu/vuln/cve-2021-22883 https://vulnerability.circl.lu/vuln/usn-6418-1 <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: nodejs, Ubuntu:20.04:LTS: nodejs</p> <p>It was discovered that Node.js incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. This issue was only fixed in Ubuntu 20.04 LTS. (CVE-2021-22883)</p> <p>Vít Šesták discovered that Node.js incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to execute arbitrary code. (CVE-2021-22884)</p> <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: nodejs, Ubuntu:20.04:LTS: nodejs</p> <p>It was discovered that Node.js incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. This issue was only fixed in Ubuntu 20.04 LTS. (CVE-2021-22883)</p> <p>Vít Šesták discovered that Node.js incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to execute arbitrary code. (CVE-2021-22884)</p> https://vulnerability.circl.lu/vuln/usn-6418-1