Not rated

CVE-2022-36127 A vulnerability in Apache SkyWalking NodeJS Agent prior to 0.5.1

Description

A vulnerability in Apache SkyWalking NodeJS Agent prior to 0.5.1. The vulnerability will cause NodeJS services that has this agent installed to be unavailable if the OAP is unhealthy and NodeJS agent can't establish the connection.

Affected products and versions

Product	Affected versions	Fixed in
Apache SkyWalking NodeJS Agent 0.5	earliest → 0.5.0	No fix stated

References

lists.apache.org lists.apache.org
[oss-security] 20220718 CVE-2022-36127: Apache SkyWalking NodeJS Agent: Service unavailability impact in NodeJS agent(version <= 0.5.0) www.openwall.com

Timeline

Published July 18, 2022
Last modified August 3, 2024

Track this CVE