CVE-2023-3917
published 2023-09-29CVE-2023-3917: Denial of Service in pipelines affecting all versions of Gitlab EE and CE prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows attacker to…
PriorityP339high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.78%
51.2th percentile
Denial of Service in pipelines affecting all versions of Gitlab EE and CE prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows attacker to cause pipelines to fail.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | gitlab | < gitlab 16.4.4+ds2-2 (sid) | gitlab 16.4.4+ds2-2 (sid) |
| gitlab | gitlab | < 16.2.8 | 16.2.8 |
| gitlab | gitlab | — | — |
| gitlab | gitlab | — | — |
| gitlab | gitlab | >= 16.3 < 16.3.5 | 16.3.5 |
| gitlab | gitlab | >= 16.3.0 < 16.3.5 | 16.3.5 |
| gitlab | gitlab | >= 16.4 < 16.4.1 | 16.4.1 |
| gitlab | gitlab_ee | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv7.5HIGH
vendor_debian4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-7jqp-vcg7-7x84: Denial of Service in pipelines affecting all versions of Gitlab EE and CE prior to 16
ghsa_unreviewed·2023-09-29
CVE-2023-3917 [HIGH] CWE-1287 GHSA-7jqp-vcg7-7x84: Denial of Service in pipelines affecting all versions of Gitlab EE and CE prior to 16
Denial of Service in pipelines affecting all versions of Gitlab EE and CE prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows attacker to cause pipelines to fail.
OSV
CVE-2023-3917: Denial of Service in pipelines affecting all versions of Gitlab EE and CE prior to 16
osv·2023-09-29·CVSS 7.5
CVE-2023-3917 [HIGH] CVE-2023-3917: Denial of Service in pipelines affecting all versions of Gitlab EE and CE prior to 16
Denial of Service in pipelines affecting all versions of Gitlab EE and CE prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows attacker to cause pipelines to fail.
GitLab
CVE-2023-3917: Denial of Service in pipelines affecting all versions of Gitlab EE and CE prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows attac
vendor_gitlab·2023-09-29·CVSS 4.3
CVE-2023-3917 [MEDIUM] CWE-1287 CVE-2023-3917: Denial of Service in pipelines affecting all versions of Gitlab EE and CE prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows attac
CVE-2023-3917: Denial of Service in pipelines affecting all versions of Gitlab EE and CE prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows attacker to cause pipelines to fail.
Debian
CVE-2023-3917: gitlab - Denial of Service in pipelines affecting all versions of Gitlab EE and CE prior ...
vendor_debian·2023·CVSS 4.3
CVE-2023-3917 [MEDIUM] CVE-2023-3917: gitlab - Denial of Service in pipelines affecting all versions of Gitlab EE and CE prior ...
Denial of Service in pipelines affecting all versions of Gitlab EE and CE prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows attacker to cause pipelines to fail.
Scope: local
sid: resolved (fixed in 16.4.4+ds2-2)
No detection rules found.
No public exploits indexed.
2023-09-29
Published