Servers and applications
CVE-2021-22883
Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unable to accept new connections and prevent the process also from opening, e.g. a file. If no file…
- Severity
- High 7.5
- Published
- 3 Mar 2021
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 21 Oct 2026
- Fixed in
- 10.24.0, 12.21.0, 14.16.0, 15.10.0
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Node.jsServers and applications · cpe:a:nodejs:node.js |
|