Vulnerability Description
A vulnerability in Apache SkyWalking NodeJS Agent prior to 0.5.1. The vulnerability will cause NodeJS services that has this agent installed to be unavailable if the OAP is unhealthy and NodeJS agent can't establish the connection.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apache | Skywalking Nodejs Agent | < 0.5.1 |
References
- http://www.openwall.com/lists/oss-security/2022/07/18/1Mailing ListThird Party Advisory
- https://lists.apache.org/thread/x238wo4r5goy39dxdjcmlofp6gcdnqr3Mailing ListRelease NotesVendor Advisory
- http://www.openwall.com/lists/oss-security/2022/07/18/1Mailing ListThird Party Advisory
- https://lists.apache.org/thread/x238wo4r5goy39dxdjcmlofp6gcdnqr3Mailing ListRelease NotesVendor Advisory
FAQ
What is CVE-2022-36127?
CVE-2022-36127 is a vulnerability with a CVSS score of 7.5 (HIGH). A vulnerability in Apache SkyWalking NodeJS Agent prior to 0.5.1. The vulnerability will cause NodeJS services that has this agent installed to be unavailable if the OAP is unhealthy and NodeJS agent ...
How severe is CVE-2022-36127?
CVE-2022-36127 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-36127?
Check the references section above for vendor advisories and patch information. Affected products include: Apache Skywalking Nodejs Agent.