CVE-2011-1027
20.03.2011, 02:00
Off-by-one error in the convert_query_hexchar function in html.c in cgit.cgi in cgit before 0.8.3.5 allows remote attackers to cause a denial of service (infinite loop) via a string composed of a % (percent) character followed by invalid hex characters, as demonstrated by a %gg sequence.Enginsight
Vendor | Product | Version |
---|---|---|
lars_hjemli | cgit | 𝑥 ≤ 0.8.3.4 |
lars_hjemli | cgit | 0.1 |
lars_hjemli | cgit | 0.2 |
lars_hjemli | cgit | 0.3 |
lars_hjemli | cgit | 0.4 |
lars_hjemli | cgit | 0.5 |
lars_hjemli | cgit | 0.6 |
lars_hjemli | cgit | 0.6.1 |
lars_hjemli | cgit | 0.6.2 |
lars_hjemli | cgit | 0.6.3 |
lars_hjemli | cgit | 0.7 |
lars_hjemli | cgit | 0.7.1 |
lars_hjemli | cgit | 0.7.2 |
lars_hjemli | cgit | 0.8 |
lars_hjemli | cgit | 0.8.1 |
lars_hjemli | cgit | 0.8.1.1 |
lars_hjemli | cgit | 0.8.2 |
lars_hjemli | cgit | 0.8.2.1 |
lars_hjemli | cgit | 0.8.2.2 |
lars_hjemli | cgit | 0.8.3 |
lars_hjemli | cgit | 0.8.3.1 |
lars_hjemli | cgit | 0.8.3.2 |
lars_hjemli | cgit | 0.8.3.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References