Lucene search

Ubuntu.comUB:CVE-2019-9220

HistoryApr 17, 2019 - 12:00 a.m.

CVE-2019-9220

2019-04-1700:00:00

ubuntu.com

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.003 Low

EPSS

Percentile

69.2%

JSON

An issue was discovered in GitLab Community and Enterprise Edition before
11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows
Uncontrolled Resource Consumption.

Notes

Author	Note
msalvatore	Affects 10.2 and later

References

about.gitlab.com/2019/03/04/security-release-gitlab-11-dot-8-dot-1-released/

launchpad.net/bugs/cve/CVE-2019-9220

nvd.nist.gov/vuln/detail/CVE-2019-9220

security-tracker.debian.org/tracker/CVE-2019-9220

www.cve.org/CVERecord?id=CVE-2019-9220

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.003 Low

EPSS

Percentile

69.2%

JSON

Related for UB:CVE-2019-9220