Description
Any git operation is passed through Jetty and a session is created. No expiry is set for the session and Jetty does not automatically dispose of the session. Over multiple git actions, this can lead to a heap memory exhaustion for Gerrit servers. We recommend upgrading Gerrit to any of the versions listed above.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Google LLC Gerrit
unspecified to < 2.15.22affectedunspecified to < 2.16.26affectedunspecified to < 3.0.16affectedunspecified to < 3.1.12affectedunspecified to < 3.2.7affectedunspecified to < 3.3.2affected