Skip to content
OpenAdvisories
High · 7.5 CVE-2020-13274 EUVD-2020-5535GHSA-p7jp-3g8m-8m7m

A security issue allowed achieving Denial of Service attacks through memory exhaustion by uploading malicious artifacts in all previous Git…

Published Jun 19, 2020 · Updated Aug 4, 2024 · Assigned by GitLab

Description

A security issue allowed achieving Denial of Service attacks through memory exhaustion by uploading malicious artifacts in all previous GitLab versions through 13.0.1

Affected products

VendorProductAffectedFixed
GitLab GitLab <12.9.8, >=12.10, <12.10.7, >=13.0, <13.0.1 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS gitlab No fix yet —

References