Linux Distros Unpatched Vulnerability : CVE-2024-43380

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fugit contains time tools for flor and the floraison group. The fugit natural parser, that turns every wednesday at 5pm into 0 17 3, accepted any length of inpu...

Logstash 8.15.1 Security Update (ESA-2024-35)

Logstash Uncontrolled Resource Consumption vulnerability ESA-2024-35 On August 19, 2024, Floraison announced CVE-2024-43380, which affects fugit "natural" parser. The parser turns natural language into a cron date and was found to accept any length of input, causing an uncontrolled resource...

CVE-2024-43380

creationtimestamp| type| source ---|---|--- 2024-08-19 17:41:46+00:00| seen| https://t.me/cvedetector/3519...

CVE-2024-43380 vulnerabilities

Vulnerabilities for packages: logstash-jre-bcfips, logstash...

CVE-2024-43380 vulnerabilities

Vulnerabilities for packages: logstash...

CVE-2024-43380

fugit contains time tools for flor and the floraison group. The fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sigh...

CVE-2024-43380

fugit contains time tools for flor and the floraison group. The fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sigh...

CVE-2024-43380 fugit parse and parse_nat stall on lengthy input

fugit contains time tools for flor and the floraison group. The fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sigh...

CVE-2024-43380 fugit parse and parse_nat stall on lengthy input

fugit contains time tools for flor and the floraison group. The fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sigh...