CVE-2018-17975
published 2018-12-04CVE-2018-17975: An issue was discovered in GitLab Community Edition 11.x before 11.1.8, 11.2.x before 11.2.5, and 11.3.x before 11.3.2. There is Information Exposure via the…
PriorityP425medium5.3CVSS 3.0
AVNACLPRNUINSUCLINAN
EPSS
1.13%
62.5th percentile
An issue was discovered in GitLab Community Edition 11.x before 11.1.8, 11.2.x before 11.2.5, and 11.3.x before 11.3.2. There is Information Exposure via the GFM markdown API.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | gitlab | < gitlab 11.1.8+dfsg-2 (sid) | gitlab 11.1.8+dfsg-2 (sid) |
| gitlab | gitlab | — | — |
| gitlab | gitlab | >= 11.0.0 < 11.1.8 | 11.1.8 |
| gitlab | gitlab | >= 11.2.0 < 11.2.5 | 11.2.5 |
| gitlab | gitlab | >= 11.3.0 < 11.3.2 | 11.3.2 |
| linux | linux_kernel | >= 0 < 4.4.0-127.153 | 4.4.0-127.153 |
CVSS provenance
nvdv3.05.3MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
osv5.5MEDIUM
vendor_debian5.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GitLab
CVE-2018-17975: An issue was discovered in GitLab Community Edition 11.x before 11.1.8, 11.2.x before 11.2.5, and 11.3.x before 11.3.2. There is Information Exposure
vendor_gitlab·2018-12-04·CVSS 5.3
CVE-2018-17975 [MEDIUM] CWE-200 CVE-2018-17975: An issue was discovered in GitLab Community Edition 11.x before 11.1.8, 11.2.x before 11.2.5, and 11.3.x before 11.3.2. There is Information Exposure
CVE-2018-17975: An issue was discovered in GitLab Community Edition 11.x before 11.1.8, 11.2.x before 11.2.5, and 11.3.x before 11.3.2. There is Information Exposure via the GFM markdown API.
Debian
CVE-2018-17975: gitlab - An issue was discovered in GitLab Community Edition 11.x before 11.1.8, 11.2.x b...
vendor_debian·2018·CVSS 5.3
CVE-2018-17975 [MEDIUM] CVE-2018-17975: gitlab - An issue was discovered in GitLab Community Edition 11.x before 11.1.8, 11.2.x b...
An issue was discovered in GitLab Community Edition 11.x before 11.1.8, 11.2.x before 11.2.5, and 11.3.x before 11.3.2. There is Information Exposure via the GFM markdown API.
Scope: local
sid: resolved (fixed in 11.1.8+dfsg-2)
GHSA
GHSA-ff57-593p-9ffx: An issue was discovered in GitLab Community Edition 11
ghsa_unreviewed·2022-05-14
CVE-2018-17975 [MEDIUM] CWE-200 GHSA-ff57-593p-9ffx: An issue was discovered in GitLab Community Edition 11
An issue was discovered in GitLab Community Edition 11.x before 11.1.8, 11.2.x before 11.2.5, and 11.3.x before 11.3.2. There is Information Exposure via the GFM markdown API.
OSV
linux, linux-aws, linux-kvm, vulnerabilities
osv·2018-05-22·CVSS 5.5
CVE-2018-3639 linux, linux-aws, linux-kvm, vulnerabilities
linux, linux-aws, linux-kvm, vulnerabilities
Jann Horn and Ken Johnson discovered that microprocessors utilizing
speculative execution of a memory read may allow unauthorized memory
reads via a sidechannel attack. This flaw is known as Spectre
Variant 4. A local attacker could use this to expose sensitive
information, including kernel memory. (CVE-2018-3639)
Tuba Yavuz discovered that a double-free error existed in the USBTV007
driver of the Linux kernel. A local attacker could use this to cause a
denial of service (system crash) or possibly execute arbitrary code.
(CVE-2017-17975)
It was discovered that a race condition existed in the F2FS implementation
in the Linux kernel. A local attacker could use this to cause a denial of
service (system crash). (CVE-2017-18193)
It was discovered
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2018-12-04
Published