CVE-2021-39939 — Vulnetix

Try Vulnetix Request Demo

CVE-2021-39939 PUBLISHED

An uncontrolled resource consumption vulnerability in GitLab Runner affecting all versions starting from 13.7 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows an attacker triggering a job with a specially crafted docker image to exhaust resources on runner manager

EPSS 0.14% · 33.6th percentile

Risk Scores

EPSS Score

0.14%

33.6th percentile

Affected Products

Vendor	Product	Versions
Bitnami	gitlab	13.7.0, 14.4.0, 14.5.0
Bitnami	gitlab	13.7.0, 14.4.0, 14.5.0

Timeline

Jul 1, 2021 CVE Published
Dec 13, 2021 EPSS Score
Jan 6, 2022 EPSS Score
Feb 4, 2022 EPSS Score
Feb 5, 2022 EPSS Score
Apr 1, 2022 EPSS Score
May 23, 2022 EPSS Score
Jul 17, 2022 EPSS Score
Sep 9, 2022 EPSS Score
Nov 2, 2022 EPSS Score
Dec 26, 2022 EPSS Score
Feb 18, 2023 EPSS Score

References

Open in Interactive Console →