Vulnetix
Try Vulnetix Request Demo
CVE-2012-4465 PUBLISHED CVSS 6.5 MEDIUM

Heap-based buffer overflow in the substr function in parsing.c in cgit 0.9.0.3 and earlier allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via an empty username in the "Author" field in a commit.

EPSS 3.46% · 87.4th percentile

Risk Scores

CVSS v2.0
6.5
EPSS Score
3.46%
87.4th percentile

Affected Products

VendorProductVersions
lars_hjemlicgit0.9.0.2, 0, 0.1
n/an/an/a

Timeline

References

Open in Interactive Console →