Aller au contenu
Se connecter
6.5 Moyenne

CVE-2021-22553 Any git operation is passed through Jetty and a session is created

Description

Any git operation is passed through Jetty and a session is created. No expiry is set for the session and Jetty does not automatically dispose of the session. Over multiple git actions, this can lead to a heap memory exhaustion for Gerrit servers. We recommend upgrading Gerrit to any of the versions listed above.

Produits et versions touchés

Produit Versions touchées Corrigé en
Gerrit 3.3 premières → < 3.3.2 3.3.2
Gerrit 3.2 premières → < 3.2.7 3.2.7
Gerrit 3.1 premières → < 3.1.12 3.1.12
Gerrit 3.0 premières → < 3.0.16 3.0.16
Gerrit 2.16 premières → < 2.16.26 2.16.26
Gerrit 2.15 premières → < 2.15.22 2.15.22
Suivre cette CVE