Buffer overflow in Lars Hjemli Cgit

CVE-2012-4465

Heap-based buffer overflow in the substr function in parsing.c in cgit 0.9.0.3 and earlier allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via an empty username in the "Author" field in a commit.

Vulnerability class: Buffer Overflow

EPSS: 0.034 (87.5th percentile) — read the EPSS interpretation.