CVE-2022-36127

Service unavailability impact in NodeJS agent(version <= 0.5.0)

概要

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

A vulnerability in Apache SkyWalking NodeJS Agent prior to 0.5.1. The vulnerability will cause NodeJS services that has this agent installed to be unavailable if the OAP is unhealthy and NodeJS agent can't establish the connection.

出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

参照URL

advisory github.com
advisory nvd.nist.gov
web lists.apache.org
web openwall.com