CVE-2011-1027

Exp

Off-by-one error in the convert_query_hexchar function in html.c in cgit.cgi in cgit before 0.8.3.5 allows remote attackers to cause a denial of service (infinite loop) via a string composed of a % (percent) character followed by invalid hex characters, as demonstrated by a %gg sequence.

Published: 2011-03-19 Last update: 2026-06-16 Assigner: [email protected] Source: [email protected]
NVD Status：Modified，CVE State: published
View at NVD, CVE.org, EUVD

CVE-2011-1027 is rated High Exploit Risk (64.5/100): CVSS Medium severity, with medium exploitation likelihood (EPSS 3.75%). 2 public exploit reference(s) are indexed (Exploit-DB). Public exploits are available—assess exposure, apply mitigations, and prioritize patching.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Public exploit references (Exploit-DB) for CVE-2011-1027

EDB-ID Source Kind Published Link
— nvd_ref exploit_tag Exploit-DB ↗
— nvd_ref exploit_tag Exploit-DB ↗

Exploit prediction scoring system (EPSS) score for CVE-2011-1027

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-06-15 5.19% 3.75% -1.45%
2 2025-03-30 3.87% 5.19% +1.33%
3 2025-03-29 — 3.87% —

Full EPSS history (9 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2011-1027

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
5.0 2.0 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:L)
Exploitation conditions are straightforward and predictable.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:N)
No confidentiality impact.
Integrity impact (I:N)
No integrity impact.
Availability impact (A:P)
Partial availability impact.
 10.0 2.9 [email protected]

Weakness enumeration for CVE-2011-1027

Affected software / configurations for CVE-2011-1027

Vendor Product Version Raw CPE
lars_hjemli cgit <= 0.8.3.4 cpe:2.3:a:lars_hjemli:cgit:*:*:*:*:*:*:*:*
lars_hjemli cgit 0.1 cpe:2.3:a:lars_hjemli:cgit:0.1:*:*:*:*:*:*:*
lars_hjemli cgit 0.2 cpe:2.3:a:lars_hjemli:cgit:0.2:*:*:*:*:*:*:*
lars_hjemli cgit 0.3 cpe:2.3:a:lars_hjemli:cgit:0.3:*:*:*:*:*:*:*
lars_hjemli cgit 0.4 cpe:2.3:a:lars_hjemli:cgit:0.4:*:*:*:*:*:*:*
lars_hjemli cgit 0.5 cpe:2.3:a:lars_hjemli:cgit:0.5:*:*:*:*:*:*:*
lars_hjemli cgit 0.6 cpe:2.3:a:lars_hjemli:cgit:0.6:*:*:*:*:*:*:*
lars_hjemli cgit 0.6.1 cpe:2.3:a:lars_hjemli:cgit:0.6.1:*:*:*:*:*:*:*
lars_hjemli cgit 0.6.2 cpe:2.3:a:lars_hjemli:cgit:0.6.2:*:*:*:*:*:*:*
lars_hjemli cgit 0.6.3 cpe:2.3:a:lars_hjemli:cgit:0.6.3:*:*:*:*:*:*:*
lars_hjemli cgit 0.7 cpe:2.3:a:lars_hjemli:cgit:0.7:*:*:*:*:*:*:*
lars_hjemli cgit 0.7.1 cpe:2.3:a:lars_hjemli:cgit:0.7.1:*:*:*:*:*:*:*
lars_hjemli cgit 0.7.2 cpe:2.3:a:lars_hjemli:cgit:0.7.2:*:*:*:*:*:*:*
lars_hjemli cgit 0.8 cpe:2.3:a:lars_hjemli:cgit:0.8:*:*:*:*:*:*:*
lars_hjemli cgit 0.8.1 cpe:2.3:a:lars_hjemli:cgit:0.8.1:*:*:*:*:*:*:*
lars_hjemli cgit 0.8.1.1 cpe:2.3:a:lars_hjemli:cgit:0.8.1.1:*:*:*:*:*:*:*
lars_hjemli cgit 0.8.2 cpe:2.3:a:lars_hjemli:cgit:0.8.2:*:*:*:*:*:*:*
lars_hjemli cgit 0.8.2.1 cpe:2.3:a:lars_hjemli:cgit:0.8.2.1:*:*:*:*:*:*:*
lars_hjemli cgit 0.8.2.2 cpe:2.3:a:lars_hjemli:cgit:0.8.2.2:*:*:*:*:*:*:*
lars_hjemli cgit 0.8.3 cpe:2.3:a:lars_hjemli:cgit:0.8.3:*:*:*:*:*:*:*
lars_hjemli cgit 0.8.3.1 cpe:2.3:a:lars_hjemli:cgit:0.8.3.1:*:*:*:*:*:*:*
lars_hjemli cgit 0.8.3.2 cpe:2.3:a:lars_hjemli:cgit:0.8.3.2:*:*:*:*:*:*:*
lars_hjemli cgit 0.8.3.3 cpe:2.3:a:lars_hjemli:cgit:0.8.3.3:*:*:*:*:*:*:*
fedoraproject fedora 13 cpe:2.3:o:fedoraproject:fedora:13:*:*:*:*:*:*:*
fedoraproject fedora 14 cpe:2.3:o:fedoraproject:fedora:14:*:*:*:*:*:*:*
fedoraproject fedora 15 cpe:2.3:o:fedoraproject:fedora:15:*:*:*:*:*:*:*

References for CVE-2011-1027

URL Tags
http://article.gmane.org/gmane.comp.version-control.git/168493 Broken Link
http://hjemli.net/git/cgit/commit/?h=stable&id=fc384b16fb9787380746000d3cea2d53fccc548e Broken Link Patch
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055896.html Mailing List Patch
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055898.html Mailing List Patch
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055966.html Mailing List
http://openwall.com/lists/oss-security/2011/03/07/3 Mailing List Patch Third Party Advisory
http://secunia.com/advisories/43633 Broken Link Vendor Advisory
http://secunia.com/advisories/43788 Broken Link Vendor Advisory
http://www.osvdb.org/71005 Broken Link
http://www.securityfocus.com/bid/46756 Broken Link Exploit Third Party Advisory VDB Entry
http://www.vupen.com/english/advisories/2011/0667 Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=680905 Exploit Issue Tracking Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/65919 Third Party Advisory VDB Entry
cvelogic Threat Intelligence