CVEvulnerability

CVE-2011-1027

5.0 MEDIUM Published 2011-03-20 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2011-03-20
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses: CWE-193

Description

Off-by-one error in the convert_query_hexchar function in html.c in cgit.cgi in cgit before 0.8.3.5 allows remote attackers to cause a denial of service (infinite loop) via a string composed of a % (percent) character followed by invalid hex characters, as demonstrated by a %gg sequence.

Affected configurations

• lars hjemli cgit (<= 0.8.3.4) • lars hjemli cgit 0.1 • lars hjemli cgit 0.2 • lars hjemli cgit 0.3 • lars hjemli cgit 0.4 • lars hjemli cgit 0.5 • lars hjemli cgit 0.6 • lars hjemli cgit 0.6.1 • lars hjemli cgit 0.6.2 • lars hjemli cgit 0.6.3 • lars hjemli cgit 0.7 • lars hjemli cgit 0.7.1 • lars hjemli cgit 0.7.2 • lars hjemli cgit 0.8 • lars hjemli cgit 0.8.1 • lars hjemli cgit 0.8.1.1 • lars hjemli cgit 0.8.2 • lars hjemli cgit 0.8.2.1 • lars hjemli cgit 0.8.2.2 • lars hjemli cgit 0.8.3 • lars hjemli cgit 0.8.3.1 • lars hjemli cgit 0.8.3.2 • lars hjemli cgit 0.8.3.3 • fedoraproject fedora 13 • fedoraproject fedora 14 • fedoraproject fedora 15

Weakness · CWE (1)

CWE-193 Off-by-one Error weakness

Referenced by CWE · observed example (3)

CWE-691 Insufficient Control Flow Management weakness
CWE-834 Excessive Iteration weakness
CWE-835 Loop with Unreachable Exit Condition weakness

References

http://article.gmane.org/gmane.comp.version-control.git/168493 Broken Link
http://hjemli.net/git/cgit/commit/?h=stable&id=fc384b16fb9787380746000d3cea2d53fccc548e Broken Link, Patch
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055896.html Mailing List, Patch
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055898.html Mailing List, Patch
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055966.html Mailing List
http://openwall.com/lists/oss-security/2011/03/07/3 Mailing List, Patch, Third Party Advisory
http://secunia.com/advisories/43633 Broken Link, Vendor Advisory
http://secunia.com/advisories/43788 Broken Link, Vendor Advisory
http://www.osvdb.org/71005 Broken Link
http://www.securityfocus.com/bid/46756 Broken Link, Exploit, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2011/0667 Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=680905 Exploit, Issue Tracking, Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/65919 Third Party Advisory, VDB Entry
http://article.gmane.org/gmane.comp.version-control.git/168493 Broken Link
http://hjemli.net/git/cgit/commit/?h=stable&id=fc384b16fb9787380746000d3cea2d53fccc548e Broken Link, Patch
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055896.html Mailing List, Patch
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055898.html Mailing List, Patch
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055966.html Mailing List
http://openwall.com/lists/oss-security/2011/03/07/3 Mailing List, Patch, Third Party Advisory
http://secunia.com/advisories/43633 Broken Link, Vendor Advisory
http://secunia.com/advisories/43788 Broken Link, Vendor Advisory
http://www.osvdb.org/71005 Broken Link
http://www.securityfocus.com/bid/46756 Broken Link, Exploit, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2011/0667 Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=680905 Exploit, Issue Tracking, Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/65919 Third Party Advisory, VDB Entry