PT-2011-2819 · Cgit · Cgit

Jim Meyering · Published 2011-03-20 · Updated 2023-12-22 · CVE-2011-1027

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions cgit versions prior to 0.8.3.5

Description The issue is caused by an off-by-one error in the convert query hexchar function in html.c in cgit.cgi. This allows remote attackers to cause a denial of service (infinite loop) via a string composed of a % (percent) character followed by invalid hex characters, such as a %gg sequence.

Recommendations For versions prior to 0.8.3.5, update to version 0.8.3.5 or later to resolve the issue. As a temporary workaround, consider restricting input to prevent strings with a % (percent) character followed by invalid hex characters from being processed by the convert query hexchar function.

Exploit

Fix

DoS

Weakness Enumeration

CWE-193

Related Identifiers

CVE-2011-1027

Affected Products

Cgit

References · 16

• 🔥 http://securityfocus.com/bid/46756 · Exploit
• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=680905 · Exploit
• http://openwall.com/lists/oss-security/2011/03/07/3 · Patch
• http://secunia.com/advisories/43633 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1027 · Security Note
• http://secunia.com/advisories/43788 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055966.html · Vendor Advisory
• http://hjemli.net/git/cgit/commit/?h=stable&id=fc384b16fb9787380746000d3cea2d53fccc548e · Patch
• http://vupen.com/english/advisories/2011/0667 · Note
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055896.html · Patch, Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055898.html · Patch, Vendor Advisory
• https://t.me/cvenotify/64947 · Telegram Post
• http://article.gmane.org/gmane.comp.version-control.git/168493 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1027 · Note
• http://osvdb.org/71005 · Note