CVE-2022-3639

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-3639
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-3639.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-3639
Aliases
Downstream
Published
2022-10-21T00:00:00Z
Modified
2026-04-10T04:49:33.558600Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
Summary
[none]
Details

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 10.8 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. Improper data handling on branch creation could have been used to trigger high CPU usage.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/3xxx/CVE-2022-3639.json",
    "cna_assigner": "GitLab"
}
References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
342f33beb2ce090cfabfd0a5e7327b78d04588bb
Fixed
e3fcea907325032eeaa732b45d404a26e6310018
Database specific 
{
    "versions": [
        {
            "introduced": "10.8"
        },
        {
            "fixed": "15.1.6"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
d836c22d87f6f0397b93cc72ce3af27a6dc02d93
Fixed
e04b0a6dd2a14f79ac08d66fea184314051a1669
Database specific 
{
    "versions": [
        {
            "introduced": "15.2"
        },
        {
            "fixed": "15.2.4"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
b189ba070558de141d90142340de25bd3edcbefc
Fixed
e2ffae9620a2f88ebff56d17b26046f292aef85a
Database specific 
{
    "versions": [
        {
            "introduced": "15.3"
        },
        {
            "fixed": "15.3.2"
        }
    ]
}

Affected versions

v15.*
v15.2.0-ee
v15.2.2-ee
v15.3.0-ee

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-3639.json"