CVE-2017-18589

CVE-2017-18589 affects the Rust cookie crate (pre-0.7.6). The issue arises from using time::Duration::seconds to parse Max-Age; very large integer values trigger a panic, potentially causing DoS. The Red Hat, Debian, GHSA, OSV, and RustSec records corroborate: the vulnerability is caused by Max-A...

CVE-2017-18589

An issue was discovered in the cookie crate before 0.7.6 for Rust. Large integers in the Max-Age of a cookie cause a panic...