gitlab-runner

Link	package \| bugs open \| bugs closed \| Wiki \| GitHub \| web search
Description	The official GitLab CI runner written in Go
Version	17.5.3-1 [extra]

Resolved

Group	Affected	Fixed	Severity	Status	Ticket
AVG-2619	14.5.0-1	14.5.2-1	Medium	Fixed

Issue	Group	Severity	Remote	Type	Description
CVE-2021-39947	AVG-2619	Medium	Yes	Denial of service	An uncontrolled resource consumption vulnerability in GitLab Runner before version 14.5.2 allows an attacker triggering a job with a specially crafted...
CVE-2021-39939	AVG-2619	Medium	Yes	Incorrect calculation	GitLab Runner before version 14.5.2 was susceptible to Golang security issue CVE-2021-44717: don’t close fd 0 on ForkExec error, which could result in...

Issue

Group

Severity

Remote

Type

Description

CVE-2021-39947

AVG-2619

Medium

Yes

Denial of service

An uncontrolled resource consumption vulnerability in GitLab Runner before version 14.5.2 allows an attacker triggering a job with a specially crafted...

CVE-2021-39939

AVG-2619

Medium

Yes

Incorrect calculation

GitLab Runner before version 14.5.2 was susceptible to Golang security issue CVE-2021-44717: don’t close fd 0 on ForkExec error, which could result in...