Description

A vulnerability in Apache SkyWalking NodeJS Agent prior to 0.5.1. The vulnerability will cause NodeJS services that has this agent installed to be unavailable if the OAP is unhealthy and NodeJS agent can't establish the connection.

Remediation

References

https://lists.apache.org/thread/x238wo4r5goy39dxdjcmlofp6gcdnqr3

http://www.openwall.com/lists/oss-security/2022/07/18/1

Related Vulnerabilities

CVE-2023-33944 Vulnerability in maven package com.liferay.portal:release.portal.bom

CVE-2022-24785 Vulnerability in npm package moment

CVE-2021-28099 Vulnerability in maven package com.netflix.hollow:hollow

CVE-2022-21718 Vulnerability in maven package org.webjars.npm:electron

CVE-2021-34080 Vulnerability in npm package ssl-utils

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Mailing List Release Notes Vendor Advisory Third Party Advisory NVD-CWE-noinfo