Any git operation is passed through Jetty and a session is created. No expiry is set for the session and Jetty does not automatically dispose of the session. Over multiple git actions, this can lead to a heap memory exhaustion for Gerrit servers. We recommend upgrading Gerrit to any of the versions listed above.
References
Link | Resource |
---|---|
https://bugs.chromium.org/p/gerrit/issues/detail?id=13858 | Issue Tracking Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: Google
Published: 2021-01-31T00:00:00
Updated: 2021-02-17T12:05:17
Reserved: 2021-01-05T00:00:00
Link: CVE-2021-22553
JSON object: View
NVD Information
Status : Analyzed
Published: 2021-02-17T12:15:12.063
Modified: 2022-10-25T16:35:35.460
Link: CVE-2021-22553
JSON object: View
Redhat Information
No data.