Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2021/08/25 8:43 p.m.36 views

Improper Input Validation in cookie

Affected versions of this crate use the time crate and the method Duration::seconds to parse the Max-Age duration cookie setting. This method will panic if the value is greater than 2^64/1000 and less than or equal to 2^64, which can result in denial of service for a client or server. This flaw w...

7.5CVSS7.1AI score0.01485EPSS
SaveExploits0References5Affected Software1
RustSec
RustSec
added 2017/05/06 12:0 p.m.30 views

Large cookie Max-Age values can cause a denial of service

Affected versions of this crate use the time crate and the method Duration::seconds to parse the Max-Age duration cookie setting. This method will panic if the value is greater than 2^64/1000 and less than or equal to 2^64, which can result in denial of service for a client or server. This flaw w...

7.5CVSS4.1AI score0.01485EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder