BIT-GITLAB-2025-8014 Allocation of Resources Without Limits or Throttling in GitLab

Denial of Service issue in GraphQL endpoints in Gitlab EE/CE affecting all versions from 11.10 prior to 18.2.7, 18.3 prior to 18.3.3, and 18.4 prior to 18.4.1 allows unauthenticated users to potentially bypass query complexity limits leading to resource exhaustion and service disruption...

Improper Check or Handling of Exceptional Conditions

Overview Affected versions of this package are vulnerable to Improper Check or Handling of Exceptional Conditions in the /api/webhook endpoint. An attacker can cause the server to crash and disrupt service availability by sending a Bitbucket Server Push event with JSON field repository.links.clon...

The vulnerability of the nfsd component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nfsd component in Linux operating systems is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to data type conversion errors, allows attackers to trigger a service failure.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to data type conversion errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the zswap component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the zswap component in the Linux operating system’s kernel is related to errors during thread locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the netfilter component in the Linux operating system’s kernel allows a perpetrator to compromise data integrity and cause service failures.

The vulnerability of the netfilter component in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise data integrity and cause service failures...

The vulnerability of the genirq/msi component in the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the genirq/msi component in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the web page rendering module in WebKitGTK and WPE WebKit, related to the occurrence of operations outside the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Web page rendering module in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the dm-bufio.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dm-bufio.c component in the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the jfs_dmap.c component of the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the jfsdmap.c component in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the drivers/s390 kernel component of the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Linux operating system’s S390 kernel driver components is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the ocfs2 component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the ocfs2 component in the Linux operating system is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the net/can/bcm.c component of the Linux operating system allows a hacker to gain access to confidential data and also cause a service failure.

The vulnerability in the net/can/bcm.c component of the Linux operating system is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service failures...

The vulnerability of the netfilter component in the Linux operating system’s kernel allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the netfilter component in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause...

The vulnerability of the string_view.h component in the OpenImageIO image processing library allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the stringview.h component in the OpenImageIO image processing library is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the iommu_copy_struct_from_user() function in the iommu component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the iommucopystructfromuser function in the iommu component of the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel Wi-Fi component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s kernel Wi-Fi component relates to the operation of data out of the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the driver/net/ppp/ppp_synctty.c component of the Linux operating system allows a hacker to gain access to confidential data and also cause a service failure.

The vulnerability in the drivers/net/ppp/pppsynctty.c component of the Linux kernel relates to reading data from beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service interruptions...

The vulnerability of the fs/squashfs component in Linux operating systems allows attackers to gain access to confidential data and cause service interruptions.

The vulnerability of the fs/squashfs component in Linux operating systems relates to reading data from buffer files beyond their allowable limits. Exploiting this vulnerability can allow attackers to access confidential data and also cause service failures...

The vulnerability of the `depack_pha` function in the `loaders/prowizard/pha.c` library for playing music with Libxmp allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the depackpha function in the loaders/prowizard/pha.c library, which is used for playing music with Libxmp, involves a numerical loss of significance. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service...