EUVD-2021-1847

Malware in sbrugna...

CVE-2021-29932

An issue was discovered in the parseduration crate through 2021-03-18 for Rust. It allows attackers to cause a denial of service CPU and memory consumption via a duration string with a large exponent...

boomerang (>=0.1.0, <=0.3.0), boomerang_builder (0.3.0) +13 more potentially affected by CVE-2021-29932 via parse_duration (2.1.1)

parseduration CARGO version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on parseduration and may be impacted: - boomerang =0.1.0, =0.1.0, =1.0.0-alpha.3, =3.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.2.1, =0.3.2 - wait-until 1.0.0 Source cves:...

Uncontrolled Resource Consumption in parse_duration

An issue was discovered in the parseduration crate through 2021-03-18 for Rust. It allows attackers to cause a denial of service CPU and memory consumption via a duration string with a large exponent...

GHSA-QPGV-G792-WH6X Uncontrolled Resource Consumption in parse_duration

An issue was discovered in the parseduration crate through 2021-03-18 for Rust. It allows attackers to cause a denial of service CPU and memory consumption via a duration string with a large exponent...

boomerang (>=0.1.0, <=0.3.0), boomerang_builder (0.3.0) +13 more potentially affected by CVE-2021-1000007 +1 more via parse_duration (2.1.1)

parseduration CARGO version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on parseduration and may be impacted: - boomerang =0.1.0, =0.1.0, =1.0.0-alpha.3, =3.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.2.1, =0.3.2 - wait-until 1.0.0 Source cves:...

denial of service in parse_duration version up to 2.1.0

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29932. Reason: This candidate is a duplicate of CVE-2021-29932. Notes: All CVE users should reference CVE-2021-29932 instead of this candidate...

GSD-2021-1000007 denial of service in parse_duration version up to 2.1.0

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29932. Reason: This candidate is a duplicate of CVE-2021-29932. Notes: All CVE users should reference CVE-2021-29932 instead of this candidate...

Rust Denial of Service Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A denial of service vulnerability exists in parseduration crate for Rust 2021-03-18 and earlier versions, which can be exploited by an attacker to cause a denial of service CPU and memory consumption via a large...

CVE-2021-29932

An issue was discovered in the parseduration crate through 2021-03-18 for Rust. It allows attackers to cause a denial of service CPU and memory consumption via a duration string with a large exponent...

Deserialization of untrusted data

An issue was discovered in the parseduration crate through 2021-03-18 for Rust. It allows attackers to cause a denial of service CPU and memory consumption via a duration string with a large exponent...

CVE-2021-29932

The CVE-2021-29932 issue concerns the Rust crate parse_duration (up to 2021-03-18). The vulnerability lies in the duration-string parser, where an input with a large exponent can trigger excessive CPU and memory usage, leading to a denial of service. Affected component: parse_duration crate in Ru...

CVE-2021-29932

An issue was discovered in the parseduration crate through 2021-03-18 for Rust. It allows attackers to cause a denial of service CPU and memory consumption via a duration string with a large exponent...

CVE-2021-29932

An issue was discovered in the parseduration crate through 2021-03-18 for Rust. It allows attackers to cause a denial of service CPU and memory consumption via a duration string with a large exponent...

Rust Resource Management Error Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A denial of service vulnerability exists in parseduration crate for Rust 2021-03-18 and earlier versions, which can be exploited by an attacker to cause a denial of service CPU and memory consumption via a large...

CVE-2021-29932: Allocation of Resources Without Limits or Throttling

An issue was discovered in the parseduration crate through 2021-03-18 for Rust. It allows attackers to cause a denial of service CPU and memory consumption via a duration string with a large exponent...

augr-cli (>=0.1.0, <=0.2.1), boomerang (>=0.1.0, <=0.3.0) +15 more potentially affected by CVE-2021-1000007 +1 more via parse_duration (>=1.0.3, <=2.1.1)

parseduration CARGO version =1.0.3, =0.1.0, =0.1.0, =0.1.0, =1.0.0-alpha.3, =0.1.1, =3.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.2.0 and more Source cves: CVE-2021-1000007, CVE-2021-29932 Source advisory: OSV:RUSTSEC-2021-0041...