Skip to content
OpenAdvisories
Medium · 6.5 CVE-2020-13280 EUVD-2020-5540GHSA-4839-fmx8-4hrv

For GitLab before 13.0.12, 13.1.6, 13.2.3 a memory exhaustion flaw exists due to excessive logging of an invite email error message.

Published Aug 13, 2020 · Updated Aug 4, 2024 · Assigned by GitLab

Vendor: GitLab Product: GitLab Package: gitlab Category: Web / CMS Ecosystem: Ubuntu

Description

For GitLab before 13.0.12, 13.1.6, 13.2.3 a memory exhaustion flaw exists due to excessive logging of an invite email error message.

Affected products

VendorProductAffectedFixed
GitLab GitLab <13.0.12, >=13.1, <13.1.6, >=13.2, <13.2.3 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS gitlab No fix yet —

References