CVE-2024-9631: Inefficient Algorithmic Complexity in GitLab
First published: Wed Feb 05 2025(Updated: )
An issue was discovered in GitLab CE/EE affecting all versions starting from 13.6 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, where viewing diffs of MR with conflicts can be slow.
Credit: cve@gitlab.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| GitLab Community Edition | >=13.6<17.2.9>=17.3<17.3.5>=17.4<17.4.2 |
Remedy
Upgrade to versions 17.2.9, 17.3.5, 17.4.2 or above.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-9631?
CVE-2024-9631 is classified as a performance-related issue rather than a security vulnerability.
How do I fix CVE-2024-9631?
To resolve the issues related to CVE-2024-9631, you should upgrade GitLab CE/EE to versions 17.2.9, 17.3.5, or 17.4.2 or higher.
Which versions of GitLab are affected by CVE-2024-9631?
CVE-2024-9631 affects all GitLab CE/EE versions from 13.6 up to 17.2.9, 17.3 up to 17.3.5, and 17.4 up to 17.4.2.
What type of issue does CVE-2024-9631 represent?
CVE-2024-9631 represents a performance issue leading to slow diffs in merge requests with conflicts.
When was CVE-2024-9631 disclosed?
The specific disclosure date for CVE-2024-9631 is not provided, but it affects versions available in 2024.
- agent/title
- agent/weakness
- agent/remedy
- agent/description
- agent/type
- agent/first-publish-date
- agent/references
- agent/softwarecombine
- agent/author
- agent/source
- agent/severity
- agent/event
- agent/tags
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/gitlab
- canonical/gitlab community edition