FreeBSD : gitlab -- Remote code execution on project import (65fab89f-2231-46db-8541-978f4e87f32a)

critical Nessus Plugin ID 106115

Language:

Synopsis

The remote FreeBSD host is missing a security-related update.

Description

GitLab developers report :

Today we are releasing versions 10.3.4, 10.2.6, and 10.1.6 for GitLab Community Edition (CE) and Enterprise Edition (EE).

These versions contain a number of important security fixes, including two that prevent remote code execution, and we strongly recommend that all GitLab installations be upgraded to one of these versions immediately.

Solution

Update the affected package.

Plugin Details

Severity: Critical

ID: 106115

File Name: freebsd_pkg_65fab89f223146db8541978f4e87f32a.nasl

Version: 3.4

Type: local

Family: FreeBSD Local Security Checks

Published: 1/18/2018

Updated: 11/10/2018

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vulnerability Information

CPE: cpe:/o:freebsd:freebsd, p-cpe:/a:freebsd:freebsd:gitlab

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 1/17/2018

Vulnerability Publication Date: 1/16/2018

Reference Information

CVE: CVE-2017-0915, CVE-2018-3710

Detections

Analytics