CVE-2023-3246

Allocation of Resources Without Limits or Throttling in GitLab

Summary

Original description

The description as published by the source.

An issue has been discovered in GitLab EE/CE affecting all versions starting before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1 which allows an attackers to block Sidekiq job processor.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Bitnami gitlab

[{"type":"SEMVER","events":[{"introduced":"10.3.0"},{"fixed":"16.3.6"},{"introduced":"16.4.0"},{"fixed":"16.4.2"},{"introduced":"16.5.0"},{"fixed":"16.5.1"}]}]

Fix status by distribution

Fixed packages published by each distribution for this CVE

Ubuntu UBUNTU-CVE-2023-3246 gitlab

References

advisory gitlab.com
web hackerone.com
web nvd.nist.gov