Lucene search

CVE-2024-2874 Allocation of Resources Without Limits or Throttling in GitLab

🗓️ 23 May 2024 07:35:02Reported by GitLabType

Uncontrolled Resource Consumption in GitLab affecting versions before 16.10.6, 16.11 before 16.11.3, and 17.0 before 17.0.

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 11
UbuntuCve	CVE-2024-2874	23 May 202400:00	–	ubuntucve
OSV	CVE-2024-2874	23 May 202407:15	–	osv
OSV	BIT-GITLAB-2024-2874	29 May 202407:22	–	osv
OSV	UBUNTU-CVE-2024-2874	23 May 202407:15	–	osv
Vulnrichment	CVE-2024-2874 Allocation of Resources Without Limits or Throttling in GitLab	23 May 202407:02	–	vulnrichment
NVD	CVE-2024-2874	23 May 202407:15	–	nvd
Debian CVE	CVE-2024-2874	23 May 202407:15	–	debiancve
CVE	CVE-2024-2874	23 May 202407:15	–	cve
Tenable Nessus	GitLab < 16.10.6 / 16.11 < 16.11.3 / 17.0 < 17.0.1 (CVE-2024-2874)	23 May 202400:00	–	nessus
Tenable Nessus	FreeBSD : Gitlab -- Vulnerabilities (f848ef90-1848-11ef-9850-001b217b3468)	23 May 202400:00	–	nessus

[
  {
    "cpes": [
      "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "product": "GitLab",
    "repo": "git://[email protected]:gitlab-org/gitlab.git",
    "vendor": "GitLab",
    "versions": [
      {
        "lessThan": "16.10.6",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      },
      {
        "lessThan": "16.11.3",
        "status": "affected",
        "version": "16.11",
        "versionType": "semver"
      },
      {
        "lessThan": "17.0.1",
        "status": "affected",
        "version": "17.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
gitlab	www.gitlab.com/gitlab-org/gitlab/-/issues/451911
hackerone	www.hackerone.com/reports/2426166

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 May 2024 07:02Current

6.3Medium risk

Vulners AI Score6.3

CVSS36.5

EPSS0.00114

CWE-770