CVE-2021-29932

An issue was discovered in the parseduration crate through 2021-03-18 for Rust. It allows attackers to cause a denial of service CPU and memory consumption via a duration string with a large exponent...

GSD-2021-1000007 denial of service in parse_duration version up to 2.1.0

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29932. Reason: This candidate is a duplicate of CVE-2021-29932. Notes: All CVE users should reference CVE-2021-29932 instead of this candidate...

CVE-2021-29932

The CVE-2021-29932 issue concerns the Rust crate parse_duration (up to 2021-03-18). The vulnerability lies in the duration-string parser, where an input with a large exponent can trigger excessive CPU and memory usage, leading to a denial of service. Affected component: parse_duration crate in Ru...

af-core (>=0.1.0, <=0.1.8), af-lib (0.1.1) +53 more potentially affected by CVE-2021-1000007 +1 more via parse_duration (>=1.0.3, <=2.1.1)

parseduration CARGO version =1.0.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.6.2, =0.6.2, =0.6.2, =0.1.0, =0.1.0, =0.3.12, =0.1.0, =0.1.0, =0.3.0 and more Source cves: CVE-2021-1000007, CVE-2021-29932 Source advisory: OSV:RUSTSEC-2021-0041...