Critical severity9.8NVD Advisory· Published Jan 20, 2016· Updated May 6, 2026
CVE-2016-1901
CVE-2016-1901
Description
Integer overflow in the authenticate_post function in CGit before 0.12 allows remote attackers to have unspecified impact via a large value in the Content-Length HTTP header, which triggers a buffer overflow.
Affected products
2- cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
8- www.openwall.com/lists/oss-security/2016/01/14/6nvdPatch
- www.openwall.com/lists/oss-security/2016/01/14/3nvdExploit
- git.zx2c4.com/cgit/commit/nvd
- lists.fedoraproject.org/pipermail/package-announce/2016-January/176167.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2016-January/176198.htmlnvd
- lists.opensuse.org/opensuse-updates/2016-01/msg00067.htmlnvd
- lists.opensuse.org/opensuse-updates/2016-01/msg00084.htmlnvd
- www.debian.org/security/2016/dsa-3545nvd
News mentions
0No linked articles in our index yet.