CVE-2021-3382

HIGH7.0EPSS 0.91%

Buffer Overflow in gitea

Published: 4/24/2024Modified: 6/4/2024

Also known as:GHSA-9f8c-pfvv-p4gmBIT-gitea-2021-3382GO-2024-2757

Description

Stack buffer overflow vulnerability in gitea 1.9.0 through 1.13.1 allows remote attackers to cause a denial of service (crash) via vectors related to a file path.

Affected packages (3)

Bitnami/gitea>= 1.9.0, < 1.13.2
Go/code.gitea.io/gitea>= 1.9.0, < 1.13.2
Go/github.com/go-gitea/gitea>= 1.9.0, < 1.13.2

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	HIGH7.0	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

References (4)

ADVISORYhttps://github.com/advisories/GHSA-9f8c-pfvv-p4gm
ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2021-3382
PATCHhttps://github.com/go-gitea/gitea
WEBhttps://github.com/go-gitea/gitea/pull/14390