CVE-2021-22553

Click the icon to Follow me:- twitterTelegramRedditDiscord

Summary:

Any git operation is passed through Jetty and a session is created. No expiry is set for the session and Jetty does not automatically dispose of the session. Over multiple git actions, this can lead to a heap memory exhaustion for Gerrit servers. We recommend upgrading Gerrit to any of the versions listed above.

Reference Links(if available):

  • https://bugs.chromium.org/p/gerrit/issues/detail?id=13858
  • CVSS Score (if available)

    v2: / MEDIUM

    v3: /

    Links to Exploits(if available)