Lucene search
+L

4 matches found

osv_ghsa
osv_ghsa
•added 2021/08/25 8:43 p.m.•89 views

GHSA-VJRQ-CG9X-RFJP Improper Input Validation in cookie

Affected versions of this crate use the time crate and the method Duration::seconds to parse the Max-Age duration cookie setting. This method will panic if the value is greater than 2^64/1000 and less than or equal to 2^64, which can result in denial of service for a client or server. This flaw w...

7.5CVSS7.3AI score0.01514EPSS
SaveExploits0References5
RustSec
RustSec
•added 2017/05/06 12:00 p.m.•46 views

Large cookie Max-Age values can cause a denial of service

Affected versions of this crate use the time crate and the method Duration::seconds to parse the Max-Age duration cookie setting. This method will panic if the value is greater than 2^64/1000 and less than or equal to 2^64, which can result in denial of service for a client or server. This flaw w...

7.5CVSS4.1AI score0.01514EPSS
SaveExploits0Affected Software1
osv_rustsec
osv_rustsec
•added 2017/05/06 12:00 p.m.•69 views

RUSTSEC-2017-0005 Large cookie Max-Age values can cause a denial of service

Affected versions of this crate use the time crate and the method Duration::seconds to parse the Max-Age duration cookie setting. This method will panic if the value is greater than 2^64/1000 and less than or equal to 2^64, which can result in denial of service for a client or server. This flaw w...

7.5CVSS7.3AI score0.01514EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2017/05/06 12:00 a.m.•4 views

PT-2017-15156

Name of the Vulnerable Software and Affected Versions cookie crate versions prior to 0.7.6 Description The issue arises when large integers are used in the Max-Age of a cookie, causing a panic. This occurs because affected versions of the crate use the time crate and the Duration::seconds method ...

7.5CVSS0.01514EPSS
SaveExploits0References10
Rows per page
Query Builder