CVE-2024-4557

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Multiple Denial of Service (DoS) conditions has been discovered in GitLab CE/EE affecting all versions starting from 1.0 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1 which allowed an attacker to cause resource exhaustion via banzai pipeline.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

No affected versions have been published.

Timeline

Published
Jun 27, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-455707.8Memory corruption may occur during IO configuration processing when the IO port count is invalid.CVE-2024-455717.8Memory corruption may occour occur when stopping the WLAN interface after processing a WMI command from the interface.CVE-2024-455737.8Memory corruption may occour while generating test pattern due to negative indexing of display ID.CVE-2024-455747.8Memory corruption during array access in Camera kernel due to invalid index from invalid command data.CVE-2024-455757.8Memory corruption Camera kernel when large number of devices are attached through userspace.CVE-2024-455767.8Memory corruption while prociesing command buffer buffer in OPE module.CVE-2024-455777.8Memory corruption while invoking IOCTL calls from userspace to camera kernel driver to dump request information.CVE-2024-455787.8Memory corruption while acquire and update IOCTLs during IFE output resource ID validation.CVE-2024-455797.8Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request information, due to a missiCVE-2024-45589.6Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafCVE-2024-455807.8Memory corruption while handling multuple IOCTL calls from userspace for remote invocation.CVE-2024-455817.8Memory corruption while sound model registration for voice activation with audio kernel driver.