Skip to content
OpenAdvisories
Medium · 5.4 CVE-2020-13295 EUVD-2020-5555GHSA-83vw-qmcc-rxwg

For GitLab Runner before 13.0.12, 13.1.6, 13.2.3, by replacing dockerd with a malicious server, the Shared Runner is susceptible to SSRF.

Published Aug 10, 2020 · Updated Aug 4, 2024 · Assigned by GitLab

Vendor: GitLab Product: GitLab Runner Package: gitlab-ci-multi-runner Category: Web / CMS Ecosystem: Ubuntu

Description

For GitLab Runner before 13.0.12, 13.1.6, 13.2.3, by replacing dockerd with a malicious server, the Shared Runner is susceptible to SSRF.

Affected products

VendorProductAffectedFixed
GitLab GitLab Runner >=1.0, <13.0.12, >=13.1, <13.1.6, >=13.2, <13.2.3 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS gitlab-ci-multi-runner No fix yet —
Ubuntu 18.04 LTS gitlab-ci-multi-runner No fix yet —

References