CVE-2024-43380

A flaw was found in fugit's parser. Due to a lack of user input validation, the natural parser may accept any length of input and will attempt to parse it. The parse can create a thread which will never return, causing high CPU usage, which may lead to a Denial of Service...

CVE-2024-43380

fugit contains time tools for flor and the floraison group. The fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sigh...

CVE-2024-43380

CVE-2024-43380 affects the fugit component used by the floraison group. The issue stems from the fugit "natural" parser, which converts phrases like “every Wednesday at 5pm” to a cron expression. It accepted inputs of any length and could continue parsing without returning, causing an uncontrolle...