The vulnerability of the CI/CD pipeline editor of a Git-based software platform for collaborative code development on GitLab allows a hacker to trigger a service failure.

The vulnerability of the CI/CD pipeline editor of a Git-based software platform for collaborative code development on GitLab is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using specially created malware...

GitLab Access Control Error Vulnerability

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. An access control error vulnerability exists in GitLab EE. An attacker...

PT-2024-4368

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 15.8 through 16.11.5 GitLab CE/EE versions 17.0 through 17.0.3 GitLab CE/EE versions 17.1 through 17.1.1 Description An issue in GitLab CE/EE allows an attacker to trigger a pipeline as another user under certain...

GitLab Resource Management Error Vulnerability

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. A resource management error vulnerability exists in GitLab CE/EE versions 1.0...

MAL-2024-6791 Malicious code in bosh_plugin-pipeline (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in bosh_plugin-pipeline (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in assets-pipeline (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in asset-pipeline (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6701 Malicious code in asset-pipeline (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in asset-pipeline_i18n (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Be.Vlаanderen.Bаsisregisters.Build.Pipeline (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4292 Malicious code in Be.Vlаanderen.Bаsisregisters.Build.Pipeline (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Be.Vlаanderen.Bаsisregіsters.Buіld.Pipeline (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4293 Malicious code in Be.Vlаanderen.Bаsisregіsters.Buіld.Pipeline (NuGet)

--- -= Per source details. Do not edit below this line.=-...

DEBIAN-CVE-2024-38547

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: sshcss: Fix a null-pointer dereference in loadvideobinaries The allocation failure of mycs-yuvscalerbinary in loadvideobinaries is followed with a dereference of mycs-yuvscalerbinary after the following call chain...

BIT-GITLAB-2024-1736 Uncontrolled Resource Consumption in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions prior to 16.10.7, starting from 16.11 prior to 16.11.4, and starting from 17.0 prior to 17.0.2. A vulnerability in GitLab's CI/CD pipeline editor could allow for denial of service attacks through maliciously crafted configuration...

UBUNTU-CVE-2024-1736

An issue has been discovered in GitLab CE/EE affecting all versions prior to 16.10.7, starting from 16.11 prior to 16.11.4, and starting from 17.0 prior to 17.0.2. A vulnerability in GitLab's CI/CD pipeline editor could allow for denial of service attacks through maliciously crafted configuration...

CVE-2024-1736

An issue has been discovered in GitLab CE/EE affecting all versions prior to 16.10.7, starting from 16.11 prior to 16.11.4, and starting from 17.0 prior to 17.0.2. A vulnerability in GitLab's CI/CD pipeline editor could allow for denial of service attacks through maliciously crafted configuration...

CVE-2024-1736

Removed by vendor...

PT-2024-4307 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions prior to 16.10.7 GitLab CE/EE versions 16.11 prior to 16.11.4 GitLab CE/EE versions 17.0 prior to 17.0.2 Description: A vulnerability in GitLab's CI/CD pipeline editor could allow for denial of service attacks through...