Off-by-one error in the convert_query_hexchar function in html.c in cgit.cgi in cgit before 0.8.3.5 allows remote attackers to cause a denial of service (infinite loop) via a string composed of a % (percent) character followed by invalid hex characters, as demonstrated by a %gg sequence.

Threat-Mapped Scoring

Score: 1.9

Priority: P3 - Important (Medium)

• S9 – Sabotage of System/App
• S10 – Denial of Service (+0.1 bonus)

EPSS

Score: 0.05194
Percentile: 0.89477

CVSS Scoring

Mapped CWE(s)

• CWE-193 : Off-by-one Error

Affected Products

• cpe:2.3:a:lars_hjemli:cgit:*:*:*:*:*:*:*:*
• cpe:2.3:a:lars_hjemli:cgit:0.1:*:*:*:*:*:*:*
• cpe:2.3:a:lars_hjemli:cgit:0.2:*:*:*:*:*:*:*
• cpe:2.3:a:lars_hjemli:cgit:0.3:*:*:*:*:*:*:*
• cpe:2.3:a:lars_hjemli:cgit:0.4:*:*:*:*:*:*:*
• cpe:2.3:a:lars_hjemli:cgit:0.5:*:*:*:*:*:*:*
• cpe:2.3:a:lars_hjemli:cgit:0.6:*:*:*:*:*:*:*
• cpe:2.3:a:lars_hjemli:cgit:0.6.1:*:*:*:*:*:*:*
• cpe:2.3:a:lars_hjemli:cgit:0.6.2:*:*:*:*:*:*:*
• cpe:2.3:a:lars_hjemli:cgit:0.6.3:*:*:*:*:*:*:*
• cpe:2.3:a:lars_hjemli:cgit:0.7:*:*:*:*:*:*:*
• cpe:2.3:a:lars_hjemli:cgit:0.7.1:*:*:*:*:*:*:*
• cpe:2.3:a:lars_hjemli:cgit:0.7.2:*:*:*:*:*:*:*
• cpe:2.3:a:lars_hjemli:cgit:0.8:*:*:*:*:*:*:*
• cpe:2.3:a:lars_hjemli:cgit:0.8.1:*:*:*:*:*:*:*
• cpe:2.3:a:lars_hjemli:cgit:0.8.1.1:*:*:*:*:*:*:*
• cpe:2.3:a:lars_hjemli:cgit:0.8.2:*:*:*:*:*:*:*
• cpe:2.3:a:lars_hjemli:cgit:0.8.2.1:*:*:*:*:*:*:*
• cpe:2.3:a:lars_hjemli:cgit:0.8.2.2:*:*:*:*:*:*:*
• cpe:2.3:a:lars_hjemli:cgit:0.8.3:*:*:*:*:*:*:*
• cpe:2.3:a:lars_hjemli:cgit:0.8.3.1:*:*:*:*:*:*:*
• cpe:2.3:a:lars_hjemli:cgit:0.8.3.2:*:*:*:*:*:*:*
• cpe:2.3:a:lars_hjemli:cgit:0.8.3.3:*:*:*:*:*:*:*
• cpe:2.3:o:fedoraproject:fedora:13:*:*:*:*:*:*:*
• cpe:2.3:o:fedoraproject:fedora:14:*:*:*:*:*:*:*
• cpe:2.3:o:fedoraproject:fedora:15:*:*:*:*:*:*:*

← Back to Home