CVE-2021-39947

ALTO 7.5CVE-2021-39947 · Published 06/06/2022 · updated 17/06/2026

In breve

CVE-2021-39947 è una vulnerabilità ALTO (CVSS 7.5) che riguarda gitlab runner (gitlab).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.87%, superiore al 58.9% delle vulnerabilità.
Correzione: aggiornare a 14.4.2, 14.5.2, 14.3.4 o successiva.

Package	Affected versions	Patched versions
gitlab runner gitlab	`≥ 14.4.0, < 14.4.2≥ 14.5.0, < 14.5.2< 14.3.4`	`14.4.214.5.214.3.4`

Description

In specific circumstances, trace file buffers in GitLab Runner versions up to 14.3.4, 14.4 to 14.4.2, and 14.5 to 14.5.2 would re-use the file descriptor 0 for multiple traces and mix the output of several jobs

References

gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39947.json · Patch
gitlab.com/gitlab-org/gitlab-runner/-/issues/28732 · Broken Link

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free