Description
A vulnerability in Apache SkyWalking NodeJS Agent prior to 0.5.1. The vulnerability will cause NodeJS services that has this agent installed to be unavailable if the OAP is unhealthy and NodeJS agent can't establish the connection.
Remediation
References
http://www.openwall.com/lists/oss-security/2022/07/18/1
https://lists.apache.org/thread/x238wo4r5goy39dxdjcmlofp6gcdnqr3
Related Vulnerabilities
CVE-2017-7669 Vulnerability in maven package org.apache.hadoop:hadoop-yarn-server-nodemanager
CVE-2020-2185 Vulnerability in maven package org.jenkins-ci.plugins:ec2
CVE-2020-6463 Vulnerability in npm package electron
CVE-2020-7636 Vulnerability in npm package adb-driver
CVE-2019-0219 Vulnerability in npm package cordova-plugin-inappbrowser