PT-2011-2819 · Cgit · Cgit

Jim Meyering · Publicado 2011-03-20 · Atualizado 2023-12-22 · CVE-2011-1027

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions cgit versions prior to 0.8.3.5

Description The issue is caused by an off-by-one error in the convert query hexchar function in html.c in cgit.cgi. This allows remote attackers to cause a denial of service (infinite loop) via a string composed of a % (percent) character followed by invalid hex characters, such as a %gg sequence.

Recommendations For versions prior to 0.8.3.5, update to version 0.8.3.5 or later to resolve the issue. As a temporary workaround, consider restricting input to prevent strings with a % (percent) character followed by invalid hex characters from being processed by the convert query hexchar function.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-193

Identificadores relacionados

CVE-2011-1027

Produtos afetados

Cgit

Referências · 16

• 🔥 http://securityfocus.com/bid/46756 · Exploit
• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=680905 · Exploit
• http://openwall.com/lists/oss-security/2011/03/07/3 · Correção
• http://secunia.com/advisories/43633 · Aviso do Fabricante
• http://vupen.com/english/advisories/2011/0667 · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055896.html · Correção, Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055898.html · Correção, Aviso do Fabricante
• https://t.me/cvenotify/64947 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2011-1027 · Nota de Segurança
• http://article.gmane.org/gmane.comp.version-control.git/168493 · Nota
• http://secunia.com/advisories/43788 · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055966.html · Aviso do Fabricante
• http://hjemli.net/git/cgit/commit/?h=stable&id=fc384b16fb9787380746000d3cea2d53fccc548e · Correção
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1027 · Nota
• http://osvdb.org/71005 · Nota