CVE-2021-39939
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
An uncontrolled resource consumption vulnerability in GitLab Runner affecting all versions starting from 13.7 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows an attacker triggering a job with a specially crafted docker image to exhaust resources on runner manager
Una vulnerabilidad de consumo no controlado de recursos en GitLab Runner afectando a todas las versiones a partir de 13.7 anteriores a 14.3.6, a todas las versiones a partir de 14.4 anteriores a 14.4.4, a todas las versiones a partir de 14.5 anteriores a 14.5.2, permite a un atacante que desencadena un trabajo con una imagen docker especialmente manipulada agotar los recursos del administrador de runner
CVSS Scores
SSVC
- Decision:-
Timeline
- 2021-08-23 CVE Reserved
- 2021-12-13 CVE Published
- 2023-07-06 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-400: Uncontrolled Resource Consumption
CAPEC
References (2)
URL | Tag | Source |
---|---|---|
https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39939.json | Third Party Advisory | |
https://gitlab.com/gitlab-org/gitlab-runner/-/issues/28630 | Broken Link |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Gitlab Search vendor "Gitlab" | Gitlab Search vendor "Gitlab" for product "Gitlab" | >= 13.7.0 < 14.3.6 Search vendor "Gitlab" for product "Gitlab" and version " >= 13.7.0 < 14.3.6" | community |
Affected
| ||||||
Gitlab Search vendor "Gitlab" | Gitlab Search vendor "Gitlab" for product "Gitlab" | >= 13.7.0 < 14.3.6 Search vendor "Gitlab" for product "Gitlab" and version " >= 13.7.0 < 14.3.6" | enterprise |
Affected
| ||||||
Gitlab Search vendor "Gitlab" | Gitlab Search vendor "Gitlab" for product "Gitlab" | >= 14.4.0 < 14.4.4 Search vendor "Gitlab" for product "Gitlab" and version " >= 14.4.0 < 14.4.4" | community |
Affected
| ||||||
Gitlab Search vendor "Gitlab" | Gitlab Search vendor "Gitlab" for product "Gitlab" | >= 14.4.0 < 14.4.4 Search vendor "Gitlab" for product "Gitlab" and version " >= 14.4.0 < 14.4.4" | enterprise |
Affected
| ||||||
Gitlab Search vendor "Gitlab" | Gitlab Search vendor "Gitlab" for product "Gitlab" | >= 14.5.0 < 14.5.2 Search vendor "Gitlab" for product "Gitlab" and version " >= 14.5.0 < 14.5.2" | community |
Affected
| ||||||
Gitlab Search vendor "Gitlab" | Gitlab Search vendor "Gitlab" for product "Gitlab" | >= 14.5.0 < 14.5.2 Search vendor "Gitlab" for product "Gitlab" and version " >= 14.5.0 < 14.5.2" | enterprise |
Affected
|