CVE-2023-6386
published 2025-02-05CVE-2023-6386: A denial of service vulnerability was identified in GitLab CE/EE, affecting all versions from 15.11 prior to 16.6.7, 16.7 prior to 16.7.5 and 16.8 prior to…
PriorityP340high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.49%
38.6th percentile
A denial of service vulnerability was identified in GitLab CE/EE, affecting all versions from 15.11 prior to 16.6.7, 16.7 prior to 16.7.5 and 16.8 prior to 16.8.2 which allows an attacker to spike the GitLab instance resource usage resulting in service degradation.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | gitlab | < gitlab 16.6.7-1 (sid) | gitlab 16.6.7-1 (sid) |
| gitlab | gitlab | — | — |
| gitlab | gitlab | >= 15.11 < 16.6.7 | 16.6.7 |
| gitlab | gitlab | >= 15.11.0 < 16.6.7 | 16.6.7 |
| gitlab | gitlab | >= 16.7 < 16.7.5 | 16.7.5 |
| gitlab | gitlab | >= 16.7.0 < 16.7.5 | 16.7.5 |
| gitlab | gitlab | >= 16.8 < 16.8.2 | 16.8.2 |
| gitlab | gitlab | >= 16.8.0 < 16.8.2 | 16.8.2 |
| gitlab | gitlab_ce | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv7.5HIGH
vendor_debian6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GitLab
CVE-2023-6386: A denial of service vulnerability was identified in GitLab CE/EE, affecting all versions from 15.11 prior to 16.6.7, 16.7 prior to 16.7.5 and 16.8 pri
vendor_gitlab·2025-02-05·CVSS 6.5
CVE-2023-6386 [MEDIUM] CWE-770 CVE-2023-6386: A denial of service vulnerability was identified in GitLab CE/EE, affecting all versions from 15.11 prior to 16.6.7, 16.7 prior to 16.7.5 and 16.8 pri
CVE-2023-6386: A denial of service vulnerability was identified in GitLab CE/EE, affecting all versions from 15.11 prior to 16.6.7, 16.7 prior to 16.7.5 and 16.8 prior to 16.8.2 which allows an attacker to spike the GitLab instance resource usage resulting in service degradation.
Debian
CVE-2023-6386: gitlab - A denial of service vulnerability was identified in GitLab CE/EE, affecting all ...
vendor_debian·2023·CVSS 6.5
CVE-2023-6386 [MEDIUM] CVE-2023-6386: gitlab - A denial of service vulnerability was identified in GitLab CE/EE, affecting all ...
A denial of service vulnerability was identified in GitLab CE/EE, affecting all versions from 15.11 prior to 16.6.7, 16.7 prior to 16.7.5 and 16.8 prior to 16.8.2 which allows an attacker to spike the GitLab instance resource usage resulting in service degradation.
Scope: local
sid: resolved (fixed in 16.6.7-1)
OSV
CVE-2023-6386: A denial of service vulnerability was identified in GitLab CE/EE, affecting all versions from 15
osv·2025-02-05·CVSS 7.5
CVE-2023-6386 [HIGH] CVE-2023-6386: A denial of service vulnerability was identified in GitLab CE/EE, affecting all versions from 15
A denial of service vulnerability was identified in GitLab CE/EE, affecting all versions from 15.11 prior to 16.6.7, 16.7 prior to 16.7.5 and 16.8 prior to 16.8.2 which allows an attacker to spike the GitLab instance resource usage resulting in service degradation.
GHSA
GHSA-vxw5-rxj4-h92f: A denial of service vulnerability was identified in GitLab CE/EE, affecting all versions from 15
ghsa_unreviewed·2025-02-05
CVE-2023-6386 [MEDIUM] CWE-770 GHSA-vxw5-rxj4-h92f: A denial of service vulnerability was identified in GitLab CE/EE, affecting all versions from 15
A denial of service vulnerability was identified in GitLab CE/EE, affecting all versions from 15.11 prior to 16.6.7, 16.7 prior to 16.7.5 and 16.8 prior to 16.8.2 which allows an attacker to spike the GitLab instance resource usage resulting in service degradation.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-02-05
Published