Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Cabetas

#26445of 53,630
9.8Total CVSS
Vulnerabilities · 1
PT-2016-4914
9.8
2016-01-20
Cgit · Cgit · CVE-2016-1901
**Name of the Vulnerable Software and Affected Versions** CGit versions prior to 0.12 **Description** The issue is related to an integer overflow in the `authenticate post` function, which can be triggered by a large value in the `Content-Length` HTTP header. This leads to a buffer overflow, allowing remote attackers to have an unspecified impact. **Recommendations** For versions prior to 0.12, update to version 0.12 or later to resolve the issue. As a temporary workaround, consider restricting access to the `authenticate post` function to minimize the risk of exploitation. Avoid using large values in the `Content-Length` HTTP header until the issue is resolved.