CVE Catalog

CVE-2016-1901

Critical
Published: Translated: NVD NIST

Summary

Integer overflow in the authenticate_post function in CGit before version 0.12 allows remote attackers to have unspecified impact via a large value in the Content-Length HTTP header, leading to a buffer overflow.

Risk Assessment

Attackers may exploit this vulnerability to execute malicious code or gain access to the system, potentially leading to serious security implications for the organization.

Recommendation

It is recommended to update CGit to version 0.12 or later to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

Integer overflow in the authenticate_post function in CGit before 0.12 allows remote attackers to have unspecified impact via a large value in the Content-Length HTTP header, which triggers a buffer overflow.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS