oss-security - CVE-2022-36127: Apache SkyWalking NodeJS Agent: Service unavailability impact in NodeJS agent(version <= 0.5.0)

Message-ID: <bc7463ea-bb83-722a-7bfe-9b8881f9ee19@apache.org>
Date: Mon, 18 Jul 2022 11:22:23 +0000
From: Zhenxu Ke <kezhenxu94@...che.org>
To: oss-security@...ts.openwall.com
Subject: CVE-2022-36127: Apache SkyWalking NodeJS Agent: Service
 unavailability impact in NodeJS agent(version <= 0.5.0) 

Description:

The vulnerability will cause NodeJS services that has this agent installed to be unavailable if the OAP is unhealthy and NodeJS agent can't establish the connection.

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.