CVE-2012-4465

Published: Oct 10, 2012Modified: Apr 29, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

Heap-based buffer overflow in the substr function in parsing.c in cgit 0.9.0.3 and earlier allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via an empty username in the "Author" field in a commit.

Affected (28)

Products: Lars Hjemli: Cgit

1 product

Configuration A

28 vulnerable

Vulnerable Software	Affected Versions
Lars Hjemli Cgit	Up to 0.9.0.3
Lars Hjemli Cgit	Version 0.1
Lars Hjemli Cgit	Version 0.2
Lars Hjemli Cgit	Version 0.3
Lars Hjemli Cgit	Version 0.4
Lars Hjemli Cgit	Version 0.5
Lars Hjemli Cgit	Version 0.6.1
Lars Hjemli Cgit	Version 0.6.2
Lars Hjemli Cgit	Version 0.6.3
Lars Hjemli Cgit	Version 0.6
Lars Hjemli Cgit	Version 0.7.1
Lars Hjemli Cgit	Version 0.7.2
Lars Hjemli Cgit	Version 0.7
Lars Hjemli Cgit	Version 0.8.1.1
Lars Hjemli Cgit	Version 0.8.1
Lars Hjemli Cgit	Version 0.8.2.1
Lars Hjemli Cgit	Version 0.8.2.2
Lars Hjemli Cgit	Version 0.8.2
Lars Hjemli Cgit	Version 0.8.3.1
Lars Hjemli Cgit	Version 0.8.3.2
Lars Hjemli Cgit	Version 0.8.3.3
Lars Hjemli Cgit	Version 0.8.3.4
Lars Hjemli Cgit	Version 0.8.3.5
Lars Hjemli Cgit	Version 0.8.3
Lars Hjemli Cgit	Version 0.8
Lars Hjemli Cgit	Version 0.9.0.1
Lars Hjemli Cgit	Version 0.9.0.2
Lars Hjemli Cgit	Version 0.9

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (14)

http://git.zx2c4.com/cgit/commit/?id=7757d1b046ecb67b830151d20715c658867df1ec

Source: secalert@redhat.com

http://hjemli.net/pipermail/cgit/2012-July/000652.html

Source: secalert@redhat.com

http://secunia.com/advisories/50734

Source: secalert@redhat.com

Vendor Advisory

http://www.openwall.com/lists/oss-security/2012/09/30/1

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/10/03/7

Source: secalert@redhat.com

http://www.securityfocus.com/bid/55724

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=820733

Source: secalert@redhat.com

http://git.zx2c4.com/cgit/commit/?id=7757d1b046ecb67b830151d20715c658867df1ec

Source: af854a3a-2127-422b-91ae-364da2661108

http://hjemli.net/pipermail/cgit/2012-July/000652.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/50734

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.openwall.com/lists/oss-security/2012/09/30/1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/10/03/7

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/55724

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=820733

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.