Vulnerability CVE-2022-1099 - CERT Civis.Net

Vulnerability Name:

CVE-2022-1099 (CCN-223296)

Assigned:

2022-03-31

Published:

2022-03-31

Updated:

2022-04-11

Summary:

Adding a very large number of tags to a runner in GitLab CE/EE affecting all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allows an attacker to impact the performance of GitLab

CVSS v3 Severity:

4.3 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
3.8 Low (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Low

4.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
3.8 Low (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Low

CVSS v2 Severity:

4.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

4.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2022-1099

Source: CCN
Type: GitLab Web site
GitLab Critical Security Release: 14.9.2, 14.8.5, and 14.7.7

Source: XF
Type: UNKNOWN
gitlab-cve20221099-dos(223296)

Source: CONFIRM
Type: Vendor Advisory
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1099.json

Source: MISC
Type: Broken Link
https://gitlab.com/gitlab-org/gitlab/-/issues/328593

Vulnerable Configuration:

Configuration 1:

cpe:/a:gitlab:gitlab:*:*:*:*:community:*:*:* (Version < 14.7.7)

OR cpe:/a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* (Version < 14.7.7)

OR cpe:/a:gitlab:gitlab:*:*:*:*:community:*:*:* (Version >= 14.8.0 and < 14.8.5)

OR cpe:/a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* (Version >= 14.8.0 and < 14.8.5)

OR cpe:/a:gitlab:gitlab:*:*:*:*:community:*:*:* (Version >= 14.9.0 and < 14.9.2)

OR cpe:/a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* (Version >= 14.9.0 and < 14.9.2)

Configuration CCN 1:

cpe:/a:gitlab:gitlab:6.2.3:*:*:*:community:*:*:*

OR cpe:/a:gitlab:gitlab:6.2.0:*:*:*:enterprise:*:*:*

OR cpe:/a:gitlab:gitlab:6.6.0:*:*:*:enterprise:*:*:*

OR cpe:/a:gitlab:gitlab:6.6.1:*:*:*:enterprise:*:*:*

OR cpe:/a:gitlab:gitlab:9.4.3::~~enterprise~~~:*:*:*:*:*

OR cpe:/a:gitlab:gitlab:9.3.9::~~enterprise~~~:*:*:*:*:*

OR cpe:/a:gitlab:gitlab:9.2.9::~~enterprise~~~:*:*:*:*:*

OR cpe:/a:gitlab:gitlab:9.1.9::~~enterprise~~~:*:*:*:*:*

OR cpe:/a:gitlab:gitlab:9.0.12::~~enterprise~~~:*:*:*:*:*

OR cpe:/a:gitlab:gitlab:8.17.7::~~enterprise~~~:*:*:*:*:*

OR cpe:/a:gitlab:gitlab:10.1.6:*:*:*:community:*:*:*

OR cpe:/a:gitlab:gitlab:10.1.5::~~community~~~:*:*:*:*:*

OR cpe:/a:gitlab:gitlab:10.1.5::~~enterprise~~~:*:*:*:*:*

OR cpe:/a:gitlab:gitlab:10.2.5::~~enterprise~~~:*:*:*:*:*

OR cpe:/a:gitlab:gitlab:10.2.5::~~community~~~:*:*:*:*:*

OR cpe:/a:gitlab:gitlab:10.3.3::~~community~~~:*:*:*:*:*

OR cpe:/a:gitlab:gitlab:10.3.3::~~enterprise~~~:*:*:*:*:*

OR cpe:/a:gitlab:gitlab:9.5.10::~~community~~~:*:*:*:*:*

OR cpe:/a:gitlab:gitlab:9.5.10::~~enterprise~~~:*:*:*:*:*

OR cpe:/a:gitlab:gitlab:10.7.1::~~community~~~:*:*:*:*:*

OR cpe:/a:gitlab:gitlab:10.6.4:*:*:*:community:*:*:*

OR cpe:/a:gitlab:gitlab:10.5.7:*:*:*:community:*:*:*

OR cpe:/a:gitlab:gitlab:10.7.1::~~enterprise~~~:*:*:*:*:*

OR cpe:/a:gitlab:gitlab:10.6.4:*:*:*:enterprise:*:*:*

OR cpe:/a:gitlab:gitlab:10.5.7:*:*:*:enterprise:*:*:*

OR cpe:/a:gitlab:gitlab:10.7.5::~~community~~~:*:*:*:*:*

OR cpe:/a:gitlab:gitlab:10.7.5::~~enterprise~~~:*:*:*:*:*

OR cpe:/a:gitlab:gitlab:10.8.4::~~enterprise~~~:*:*:*:*:*

OR cpe:/a:gitlab:gitlab:10.8.4::~~community~~~:*:*:*:*:*

OR cpe:/a:gitlab:gitlab:11.0.0::~~community~~~:*:*:*:*:*

OR cpe:/a:gitlab:gitlab:11.0.0::~~enterprise~~~:*:*:*:*:*

OR cpe:/a:gitlab:gitlab:11.7:*:*:*:community:*:*:*

OR cpe:/a:gitlab:gitlab:11.4.13:*:*:*:community:*:*:*

OR cpe:/a:gitlab:gitlab:11.5.6:*:*:*:community:*:*:*

OR cpe:/a:gitlab:gitlab:11.6.3:*:*:*:community:*:*:*

OR cpe:/a:gitlab:gitlab:11.4.13:*:*:*:enterprise:*:*:*

OR cpe:/a:gitlab:gitlab:11.5.6:*:*:*:enterprise:*:*:*

OR cpe:/a:gitlab:gitlab:11.6.3:*:*:*:enterprise:*:*:*

OR cpe:/a:gitlab:gitlab:12.1.1:*:*:*:community:*:*:*

OR cpe:/a:gitlab:gitlab:11.11.5:*:*:*:community:*:*:*

OR cpe:/a:gitlab:gitlab:11.11.5:*:*:*:enterprise:*:*:*

OR cpe:/a:gitlab:gitlab:12.1.1:*:*:*:enterprise:*:*:*

OR cpe:/a:gitlab:gitlab:12.0.3:*:*:*:enterprise:*:*:*

OR cpe:/a:gitlab:gitlab:12.0.3:*:*:*:community:*:*:*

OR cpe:/a:gitlab:gitlab:11.11.7:*:*:*:enterprise:*:*:*

OR cpe:/a:gitlab:gitlab:11.11.7:*:*:*:community:*:*:*

OR cpe:/a:gitlab:gitlab:12.0.4:*:*:*:community:*:*:*

OR cpe:/a:gitlab:gitlab:12.0.4:*:*:*:enterprise:*:*:*

OR cpe:/a:gitlab:gitlab:12.1.2:*:*:*:enterprise:*:*:*

OR cpe:/a:gitlab:gitlab:12.1.2:*:*:*:community:*:*:*

OR cpe:/a:gitlab:gitlab:12.9.2:*:*:*:community:*:*:*

OR cpe:/a:gitlab:gitlab:12.9.2:*:*:*:enterprise:*:*:*

OR cpe:/a:gitlab:gitlab:13.0.1:*:*:*:community:*:*:*

OR cpe:/a:gitlab:gitlab:13.0.1:*:*:*:enterprise:*:*:*

OR cpe:/a:gitlab:gitlab:12.6.6:*:*:*:community:*:*:*

OR cpe:/a:gitlab:gitlab:12.6.6:*:*:*:enterprise:*:*:*

OR cpe:/a:gitlab:gitlab:13.10.3:*:*:*:community:*:*:*

OR cpe:/a:gitlab:gitlab:9.5:*:*:*:community:*:*:*

OR cpe:/a:gitlab:gitlab:14.8:*:*:*:enterprise:*:*:*

Denotes that component is vulnerable