CVE-2022-21211

Denial of Service (DoS)

This affects all versions of package posix. When invoking the toString method, it will fallback to 0x0 value, as the value of toString is not invokable (not a function), and then it will crash with type-check.

Affected

posix

CVSS v3.1 NVD

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v3.1 SNYK

5.9 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

1.04% chance of exploitation in the next 30 days, 64th percentile

Published

2022-06-10

Updated

2024-09-17

Proof-of-concept exploits (1)

• https://snyk.io/vuln/SNYK-JS-POSIX-2400719

Security advisories

• advisories/GHSA-27mx-gchc-6xjp

References

• CVE Record
• NVD entry