CVE-2011-1027
CVE-2011-1027 is a medium-severity vulnerability in Lars Hjemli Cgit with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-193.
Key facts
- Severity: Medium (CVSS 2.0 base score 5.0)
- EPSS exploit prediction: 4% (89th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-193
- Affected product: Lars Hjemli Cgit
- Published:
- Last modified:
Description
Off-by-one error in the convert_query_hexchar function in html.c in cgit.cgi in cgit before 0.8.3.5 allows remote attackers to cause a denial of service (infinite loop) via a string composed of a % (percent) character followed by invalid hex characters, as demonstrated by a %gg sequence.
Frequently asked questions
- What is CVE-2011-1027?
- Off-by-one error in the convert_query_hexchar function in html.c in cgit.cgi in cgit before 0.8.3.5 allows remote attackers to cause a denial of service (infinite loop) via a string composed of a % (percent) character followed by invalid hex characters, as demonstrated by a %gg sequence.
- How severe is CVE-2011-1027?
- CVE-2011-1027 has a CVSS 2.0 base score of 5.0, rated medium severity.
- Is CVE-2011-1027 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 4% (89th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2011-1027?
- CVE-2011-1027 primarily affects Lars Hjemli Cgit. In total, 26 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2011-1027?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2011-1027 published?
- CVE-2011-1027 was published on 2011-03-20 and last updated on 2026-06-16.
References
- http://article.gmane.org/gmane.comp.version-control.git/168493
- http://hjemli.net/git/cgit/commit/?h=stable&id=fc384b16fb9787380746000d3cea2d53fccc548e
- http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055896.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055898.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055966.html
- http://openwall.com/lists/oss-security/2011/03/07/3
- http://secunia.com/advisories/43633
- http://secunia.com/advisories/43788
- http://www.osvdb.org/71005
- http://www.securityfocus.com/bid/46756
- http://www.vupen.com/english/advisories/2011/0667
- https://bugzilla.redhat.com/show_bug.cgi?id=680905
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65919
Affected products (26)
- cpe:2.3:a:lars_hjemli:cgit:*:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.1:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.2:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.3:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.4:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.5:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.6:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.6.3:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.7:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.7.2:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.8:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.8.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.8.2:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.8.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.8.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.8.3:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.8.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.8.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:lars_hjemli:cgit:0.8.3.3:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:13:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:14:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:15:*:*:*:*:*:*:*
More vulnerabilities in Lars Hjemli Cgit
- CVE-2012-4465 — Medium (CVSS 6.5): Heap-based buffer overflow in the substr function in parsing.c in cgit 0.9.0.3 and earlier allows remote authenticated…
- CVE-2012-4548 — Medium (CVSS 6.0): Argument injection vulnerability in syntax-highlighting.sh in cgit 9.0.3 and earlier allows remote authenticated users…
- CVE-2013-2117 — Medium (CVSS 4.3): Directory traversal vulnerability in the cgit_parse_readme function in ui-summary.c in cgit before 0.9.2, when a readme…
- CVE-2011-2711 — Low (CVSS 3.5): Cross-site scripting (XSS) vulnerability in the print_fileinfo function in ui-diff.c in cgit 0.9.0.2 and earlier allows…
All CVEs affecting Lars Hjemli Cgit →
Other CWE-193 (Off-by-one Error) vulnerabilities
- CVE-2024-10442 — Critical (CVSS 10.0): Off-by-one error vulnerability in the transmission component in Synology Replication Service before 1.0.12-0066,…
- CVE-2026-53309 — Critical (CVSS 9.8): In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: fix off-by-one in dlm_match_regions()…
- CVE-2024-38441 — Critical (CVSS 9.8): Netatalk before 3.2.1 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[len] to…
- CVE-2023-46853 — Critical (CVSS 9.8): In Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy mode, if \n is used…
- CVE-2023-38429 — Critical (CVSS 9.8): An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/connection.c in ksmbd has an off-by-one error in…
- CVE-2022-34970 — Critical (CVSS 9.8): Crow before 1.0+4 has a heap-based buffer overflow via the function qs_parse in query_string.h. On successful…