CVE-2011-1027

Off-by-one error in the convert_query_hexchar function in html.c in cgit.cgi in cgit before 0.8.3.5 allows remote attackers to cause a denial of service…

published March 20, 2011

CVSS
—
EPSS
4%
Percentile
89.8
In the wild
Unconfirmed
What it is

Off-by-one error in the convert_query_hexchar function in html.c in cgit.cgi in cgit before 0.8.3.5 allows remote attackers to cause a denial of service (infinite loop) via a string composed of a % (percent) character followed by invalid hex characters, as demonstrated by a %gg sequence.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03746 · 89.8th percentile
Published
2011-03-20T01:00Z
EPSS history
Timeline
  • 20 MAR 01:00Z
    Off-by-one error in the convert_query_hexchar function in html.c in cgit.cgi in cgit before 0.8.3.5 allows remote attackers to cause a denial of service…
    cvelistv5