[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_M3YvuxWx0h2qkmlYUFcuDULZtIUUMcBOt7MfBSoNAs":3,"g5a-risk:CVE-2021-39947":120},{"success":4,"data":5,"meta":118},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":46,"epssPercentile":26,"epssTimeSeries":47,"severity":48,"affectedProducts":49,"affectedProductsCount":55,"references":56,"referencesCount":67,"weaknesses":68,"weaknessesCount":55,"isActivelyExploited":72,"cisaInfo":26,"otxData":26,"relatedBlogPosts":73,"seoMetadata":74,"configurations":99,"relatedVendorCves":116,"notableEvents":117},"CVE-2021-39947","What is CVE-2021-39947?","In specific circumstances, trace file buffers in GitLab Runner versions up to 14.3.4, 14.4 to 14.4.2, and 14.5 to 14.5.2 would re-use the file descriptor 0 for multiple traces and mix the output of several jobs","In specific circumstances, trace file buffers in GitLab Runner versions up to 14.3.4, 14.4 to 14.4.2, and 14.5 to 14.5.2 would re-use the file descriptor 0 f...","2022-06-06T17:15:09.893","2023-08-08T14:22:24.967",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":37,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":36,"ImpactScore":28},"cve@gitlab.com","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":25,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":34,"BaseSeverity":35,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",5.3,"MEDIUM",1.6,[38],{"Source":17,"Type":18,"CVSSData":39,"BaseSeverity":35,"ExploitabilityScore":44,"ImpactScore":45,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":40,"VectorString":41,"AccessVector":21,"AccessComplexity":35,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":42,"AvailabilityImpact":23,"BaseScore":43,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","PARTIAL",4.3,8.6,2.9,0.00856,[46,46,46,46,46,46,46],"High",[50],{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"gitlab","gitlab_runner","*","cpe:2.3:a:gitlab:gitlab_runner:*:*:*:*:*:*:*:*",1,[57,63],{"url":58,"source":59,"tags":60},"https:\u002F\u002Fgitlab.com\u002Fgitlab-org\u002Fcves\u002F-\u002Fblob\u002Fmaster\u002F2021\u002FCVE-2021-39947.json","Gitlab",[61,62],"Patch","Third Party Advisory",{"url":64,"source":59,"tags":65},"https:\u002F\u002Fgitlab.com\u002Fgitlab-org\u002Fgitlab-runner\u002F-\u002Fissues\u002F28732",[66],"Broken Link",2,[69],{"id":70,"name":70,"description":71},"Unknown","NVD-CWE-noinfo",false,[],{"title":75,"metaDescription":76,"keywords":77,"canonicalUrl":78,"structuredData":79},"What is CVE-2021-39947? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-39947, a high severity cyber security vulnerability from 2022. In specific circumstances, trace file buffers in GitLab Run...","CVE-2021-39947, CVE-2021-39947 vulnerability, CVE-2021-39947 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, gitlab security, gitlab_runner vulnerability","\u002Fwhat-is\u002Fcve-2021-39947",{"@context":80,"@type":81,"headline":75,"description":76,"datePublished":10,"dateModified":11,"author":82,"publisher":86,"about":90,"mainEntityOfPage":94,"articleSection":97,"keywords":98},"https:\u002F\u002Fschema.org","TechArticle",{"@type":83,"name":84,"url":85},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":83,"name":84,"url":85,"logo":87},{"@type":88,"url":89},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":91,"name":6,"description":92,"additionalType":93},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":95,"@id":96},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-39947","Cybersecurity","CVE-2021-39947, CVE-2021-39947 vulnerability, CVE-2021-39947 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[100],{"Operator":26,"Negate":26,"Nodes":101},[102],{"Operator":103,"Negate":26,"CPEMatch":104},"OR",[105,108,112],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":106,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":107,"VersionEndIncluding":26},"70B68D88-54F0-4461-AF14-953C347C232F","14.3.4",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":109,"VersionStartExcluding":26,"VersionStartIncluding":110,"VersionEndExcluding":111,"VersionEndIncluding":26},"169E7CFF-F6E8-44AD-AD12-6E7A44707DB1","14.4.0","14.4.2",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":113,"VersionStartExcluding":26,"VersionStartIncluding":114,"VersionEndExcluding":115,"VersionEndIncluding":26},"CBA81196-2D76-4B2D-9C1B-79BB2761F6E3","14.5.0","14.5.2",[],[],{"lastModified":11,"cacheTime":119,"version":40},1792371435667,{"score":121,"band":122,"action":123,"scoredAt":124},46,"Medium","Plan remediation","2026-10-16T06:54:45.160171+00:00"]