Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2011-1027
HistoryMar 20, 2011 - 2:00 a.m.

CVE-2011-1027

2011-03-2002:00:04
CWE-193
redhat
web.nvd.nist.gov
34
cve-2011-1027
denial of service
remote attack
security vulnerability
cgit

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.3

Confidence

Low

EPSS

0.042

Percentile

92.3%

JSON

Off-by-one error in the convert_query_hexchar function in html.c in cgit.cgi in cgit before 0.8.3.5 allows remote attackers to cause a denial of service (infinite loop) via a string composed of a % (percent) character followed by invalid hex characters, as demonstrated by a %gg sequence.

Affected configurations

Nvd
Node
lars_hjemlicgitRange≤0.8.3.4
OR
lars_hjemlicgitMatch0.1
OR
lars_hjemlicgitMatch0.2
OR
lars_hjemlicgitMatch0.3
OR
lars_hjemlicgitMatch0.4
OR
lars_hjemlicgitMatch0.5
OR
lars_hjemlicgitMatch0.6
OR
lars_hjemlicgitMatch0.6.1
OR
lars_hjemlicgitMatch0.6.2
OR
lars_hjemlicgitMatch0.6.3
OR
lars_hjemlicgitMatch0.7
OR
lars_hjemlicgitMatch0.7.1
OR
lars_hjemlicgitMatch0.7.2
OR
lars_hjemlicgitMatch0.8
OR
lars_hjemlicgitMatch0.8.1
OR
lars_hjemlicgitMatch0.8.1.1
OR
lars_hjemlicgitMatch0.8.2
OR
lars_hjemlicgitMatch0.8.2.1
OR
lars_hjemlicgitMatch0.8.2.2
OR
lars_hjemlicgitMatch0.8.3
OR
lars_hjemlicgitMatch0.8.3.1
OR
lars_hjemlicgitMatch0.8.3.2
OR
lars_hjemlicgitMatch0.8.3.3
Node
fedoraprojectfedoraMatch13
OR
fedoraprojectfedoraMatch14
OR
fedoraprojectfedoraMatch15
VendorProductVersionCPE
lars_hjemlicgit0.8.2cpe:/a:lars_hjemli:cgit:0.8.2:::
lars_hjemlicgitcpe:/a:lars_hjemli:cgit::::
lars_hjemlicgit0.8.3cpe:/a:lars_hjemli:cgit:0.8.3:::
lars_hjemlicgit0.8cpe:/a:lars_hjemli:cgit:0.8:::
lars_hjemlicgit0.8.3.1cpe:/a:lars_hjemli:cgit:0.8.3.1:::
lars_hjemlicgit0.8.3.2cpe:/a:lars_hjemli:cgit:0.8.3.2:::
lars_hjemlicgit0.6.1cpe:/a:lars_hjemli:cgit:0.6.1:::
lars_hjemlicgit0.8.3.3cpe:/a:lars_hjemli:cgit:0.8.3.3:::
lars_hjemlicgit0.8.2.1cpe:/a:lars_hjemli:cgit:0.8.2.1:::
lars_hjemlicgit0.7.2cpe:/a:lars_hjemli:cgit:0.7.2:::
Rows per page:
1-10 of 231

Related

nvd 1
fedora 4
openvas 6
nessus 3
cvelist 1
prion 1
nvd
nvd
CVE-2011-1027
2011-03-20 02:00:04
fedora
fedora
[SECURITY] Fedora 14 Update: cgit-0.9-1.fc14
2011-03-15 21:50:48
[SECURITY] Fedora 15 Update: cgit-0.9-1.fc15
2011-03-16 04:07:55
[SECURITY] Fedora 14 Update: cgit-0.9.0.2-2.fc14
2011-08-17 00:53:16
openvas
openvas
Fedora Update for cgit FEDORA-2011-2803
2011-03-24 00:00:00
Fedora Update for cgit FEDORA-2011-2803
2011-03-24 00:00:00
Fedora Update for cgit FEDORA-2011-9588
2011-08-19 00:00:00
nessus
nessus
Fedora 14 : cgit-0.9-1.fc14 (2011-2803)
2011-03-16 00:00:00
Fedora 15 : cgit-0.9-1.fc15 (2011-2790)
2011-03-16 00:00:00
Fedora 13 : cgit-0.9-1.fc13 (2011-2815)
2011-03-16 00:00:00
cvelist
cvelist
CVE-2011-1027
2011-03-20 01:00:00
prion
prion
Design/Logic Flaw
2011-03-20 02:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.3

Confidence

Low

EPSS

0.042

Percentile

92.3%

JSON
Related for CVE-2011-1027
nvd1fedora4openvas6nessus3cvelist1prion1