1. Home
  2. Security Advisories
  3. Alpine Linux
  4. ALPINE:CVE-2021-27290

[ALPINE:CVE-2021-27290] nodejs vulnerability

Severity Medium
Affected Packages 8
Fixed Packages 8
CVEs 1
Info Packages Vulnerabilities

[From CVE-2021-27290] ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression which is vulnerable to a denial of service. Malicious SRIs could take an extremely long time to process, leading to denial of service. This issue only affects consumers using the strict option.

Package Affected Version
pkg:apk/alpine/nodejs?arch=x86_64&distro=alpine-3.13 < 14.16.1-r1
pkg:apk/alpine/nodejs?arch=x86&distro=alpine-3.13 < 14.16.1-r1
pkg:apk/alpine/nodejs?arch=s390x&distro=alpine-3.13 < 14.16.1-r1
pkg:apk/alpine/nodejs?arch=ppc64le&distro=alpine-3.13 < 14.16.1-r1
pkg:apk/alpine/nodejs?arch=mips64&distro=alpine-3.13 < 14.16.1-r1
pkg:apk/alpine/nodejs?arch=armv7&distro=alpine-3.13 < 14.16.1-r1
pkg:apk/alpine/nodejs?arch=armhf&distro=alpine-3.13 < 14.16.1-r1
pkg:apk/alpine/nodejs?arch=aarch64&distro=alpine-3.13 < 14.16.1-r1
Package Fixed Version
pkg:apk/alpine/nodejs?arch=x86_64&distro=alpine-3.13 = 14.16.1-r1
pkg:apk/alpine/nodejs?arch=x86&distro=alpine-3.13 = 14.16.1-r1
pkg:apk/alpine/nodejs?arch=s390x&distro=alpine-3.13 = 14.16.1-r1
pkg:apk/alpine/nodejs?arch=ppc64le&distro=alpine-3.13 = 14.16.1-r1
pkg:apk/alpine/nodejs?arch=mips64&distro=alpine-3.13 = 14.16.1-r1
pkg:apk/alpine/nodejs?arch=armv7&distro=alpine-3.13 = 14.16.1-r1
pkg:apk/alpine/nodejs?arch=armhf&distro=alpine-3.13 = 14.16.1-r1
pkg:apk/alpine/nodejs?arch=aarch64&distro=alpine-3.13 = 14.16.1-r1
ID
ALPINE:CVE-2021-27290
Severity
medium
URL
https://security.alpinelinux.org/vuln/CVE-2021-27290
Published
2021-03-12T22:15:14
(3 years ago)
Modified
2021-03-12T22:15:14
(3 years ago)
Rights
Alpine Linux Security Team
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Fixed pkg:apk/alpine/nodejs?arch=x86_64&distro=alpine-3.13 alpine nodejs = 14.16.1-r1 alpine-3.13 x86_64
Affected pkg:apk/alpine/nodejs?arch=x86_64&distro=alpine-3.13 alpine nodejs < 14.16.1-r1 alpine-3.13 x86_64
Fixed pkg:apk/alpine/nodejs?arch=x86&distro=alpine-3.13 alpine nodejs = 14.16.1-r1 alpine-3.13 x86
Affected pkg:apk/alpine/nodejs?arch=x86&distro=alpine-3.13 alpine nodejs < 14.16.1-r1 alpine-3.13 x86
Fixed pkg:apk/alpine/nodejs?arch=s390x&distro=alpine-3.13 alpine nodejs = 14.16.1-r1 alpine-3.13 s390x
Affected pkg:apk/alpine/nodejs?arch=s390x&distro=alpine-3.13 alpine nodejs < 14.16.1-r1 alpine-3.13 s390x
Fixed pkg:apk/alpine/nodejs?arch=ppc64le&distro=alpine-3.13 alpine nodejs = 14.16.1-r1 alpine-3.13 ppc64le
Affected pkg:apk/alpine/nodejs?arch=ppc64le&distro=alpine-3.13 alpine nodejs < 14.16.1-r1 alpine-3.13 ppc64le
Fixed pkg:apk/alpine/nodejs?arch=mips64&distro=alpine-3.13 alpine nodejs = 14.16.1-r1 alpine-3.13 mips64
Affected pkg:apk/alpine/nodejs?arch=mips64&distro=alpine-3.13 alpine nodejs < 14.16.1-r1 alpine-3.13 mips64
Fixed pkg:apk/alpine/nodejs?arch=armv7&distro=alpine-3.13 alpine nodejs = 14.16.1-r1 alpine-3.13 armv7
Affected pkg:apk/alpine/nodejs?arch=armv7&distro=alpine-3.13 alpine nodejs < 14.16.1-r1 alpine-3.13 armv7
Fixed pkg:apk/alpine/nodejs?arch=armhf&distro=alpine-3.13 alpine nodejs = 14.16.1-r1 alpine-3.13 armhf
Affected pkg:apk/alpine/nodejs?arch=armhf&distro=alpine-3.13 alpine nodejs < 14.16.1-r1 alpine-3.13 armhf
Fixed pkg:apk/alpine/nodejs?arch=aarch64&distro=alpine-3.13 alpine nodejs = 14.16.1-r1 alpine-3.13 aarch64
Affected pkg:apk/alpine/nodejs?arch=aarch64&distro=alpine-3.13 alpine nodejs < 14.16.1-r1 alpine-3.13 aarch64
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date