CVE-2011-1027
Off-by-one error in the convert_query_hexchar function in html.c in cgit.cgi in cgit before 0.8.3...
CVE-2011-1027 is a medium vulnerability (CVSS 5.0) in Lars Hjemli Cgit, published March 20, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.75%, the 89th percentile. No source names a fixed version.
Off-by-one error in the convert_query_hexchar function in html.c in cgit.cgi in cgit before 0.8.3.5 allows remote attackers to cause a denial of service (infinite loop) via a string composed of a % (percent) character followed by invalid hex characters, as demonstrated by a %gg sequence.
Exploit likelihood
What each source reports
NVD Score used
Off-by-one error in the convert_query_hexchar function in html.c in cgit.cgi in cgit before 0.8.3.5 allows remote attackers to cause a denial of service (infinite loop) via a string composed of a % (percent) character followed by invalid hex characters, as demonstrated by a %gg sequence.
- Record
CVE-2011-1027- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-193
- Updated
- 2026-11-02
CVE List No score
Off-by-one error in the convert_query_hexchar function in html.c in cgit.cgi in cgit before 0.8.3.5 allows remote attackers to cause a denial of service (infinite loop) via a string composed of a % (percent) character followed by invalid hex characters, as demonstrated by a %gg sequence.
- Record
CVE-2011-1027- Updated
- 2026-11-02
EUVDEUVD-2011-1044 No score
Off-by-one error in the convert_query_hexchar function in html.c in cgit.cgi in cgit before 0.8.3.5 allows remote attackers to cause a denial of service (infinite loop) via a string composed of a % (percent) character followed by invalid hex characters, as demonstrated by a %gg sequence.
- Record
EUVD-2011-1044- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vg34-58mc-jr2w No score
Off-by-one error in the convert_query_hexchar function in html.c in cgit.cgi in cgit before 0.8.3...
Off-by-one error in the convert_query_hexchar function in html.c in cgit.cgi in cgit before 0.8.3.5 allows remote attackers to cause a denial of service (infinite loop) via a string composed of a % (percent) character followed by invalid hex characters, as demonstrated by a %gg sequence.
- Record
GHSA-vg34-58mc-jr2w- Weakness
- CWE-193
- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
lists.fedoraproject.org/pipermail/package-announce/2011-March/055896.html
osvdb.org/71005
securityfocus.com/bid/46756
vupen.com/english/advisories/2011/0667
openwall.com/lists/oss-security/2011/03/07/3
Show 9 moreShow less
secunia.com/advisories/43788
exchange.xforce.ibmcloud.com/vulnerabilities/65919
bugzilla.redhat.com/show_bug.cgi?id=680905
article.gmane.org/gmane.comp.version-control.git/168493
hjemli.net/git/cgit/commit?h=stable&id=fc384b16fb9787380746000d3cea2d53fccc548e
nvd.nist.gov/vuln/detail/CVE-2011-1027
github.com/advisories/GHSA-vg34-58mc-jr2w