CVE-2021-28918

Improper input validation of octal strings in netmask npm package v1.0.6 and below allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks on many of the dependent packages. A remote unauthenticated attacker can bypass packages relying on netmask to filter IPs and reach critical VPN or LAN hosts.

CVSS v3.0 9.1 CRITICAL
CVSS v2.0 6.4 MEDIUM

9.1^/10

CVSS v3.0 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

6.4^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability : 10.0 / Impact : 4.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://github.com/rs/node-netmask	Third Party Advisory
https://github.com/sickcodes/security/blob/master/advisories/SICK-2021-011.md	Exploit Third Party Advisory
https://www.bleepingcomputer.com/news/security/critical-netmask-networking-bug-impacts-thousands-of-applications/	Exploit Press/Media Coverage Third Party Advisory
https://www.npmjs.com/package/netmask	Product Third Party Advisory
https://github.com/advisories/GHSA-pch5-whg9-qr2r	Third Party Advisory
https://security.netapp.com/advisory/ntap-20210528-0010/	Third Party Advisory
https://rootdaemon.com/2021/03/29/vulnerability-in-netmask-npm-package-affects-280000-projects/	Third Party Advisory

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:a:netmask_project:netmask:*:*:*:*:*:node.js:*:*

Information

Published : 2021-04-01 06:15

Updated : 2022-03-31 09:52

NVD link : CVE-2021-28918

Mitre link : CVE-2021-28918

JSON object : View

CWE

CWE-20

Improper Input Validation

Advertisement

Products Affected

netmask_project

netmask

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://github.com/rs/node-netmask", "name": "https://github.com/rs/node-netmask", "tags": ["Third Party Advisory"], "refsource": "MISC"}, {"url": "https://github.com/sickcodes/security/blob/master/advisories/SICK-2021-011.md", "name": "https://github.com/sickcodes/security/blob/master/advisories/SICK-2021-011.md", "tags": ["Exploit", "Third Party Advisory"], "refsource": "MISC"}, {"url": "https://www.bleepingcomputer.com/news/security/critical-netmask-networking-bug-impacts-thousands-of-applications/", "name": "https://www.bleepingcomputer.com/news/security/critical-netmask-networking-bug-impacts-thousands-of-applications/", "tags": ["Exploit", "Press/Media Coverage", "Third Party Advisory"], "refsource": "MISC"}, {"url": "https://www.npmjs.com/package/netmask", "name": "https://www.npmjs.com/package/netmask", "tags": ["Product", "Third Party Advisory"], "refsource": "MISC"}, {"url": "https://github.com/advisories/GHSA-pch5-whg9-qr2r", "name": "https://github.com/advisories/GHSA-pch5-whg9-qr2r", "tags": ["Third Party Advisory"], "refsource": "MISC"}, {"url": "https://security.netapp.com/advisory/ntap-20210528-0010/", "name": "https://security.netapp.com/advisory/ntap-20210528-0010/", "tags": ["Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "https://rootdaemon.com/2021/03/29/vulnerability-in-netmask-npm-package-affects-280000-projects/", "name": "https://rootdaemon.com/2021/03/29/vulnerability-in-netmask-npm-package-affects-280000-projects/", "tags": ["Third Party Advisory"], "refsource": "MISC"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Improper input validation of octal strings in netmask npm package v1.0.6 and below allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks on many of the dependent packages. A remote unauthenticated attacker can bypass packages relying on netmask to filter IPs and reach critical VPN or LAN hosts."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-20"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2021-28918", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 6.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "acInsufInfo": false, "impactScore": 4.9, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}, "baseMetricV3": {"cvssV3": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 3.9}}, "publishedDate": "2021-04-01T13:15Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:netmask_project:netmask:*:*:*:*:*:node.js:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "1.0.6"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2022-03-31T16:52Z"}