CVE-2021-29932
An issue was discovered in the parse_duration crate through 2021-03-18 for Rust
published April 1, 2021
What it is
An issue was discovered in the parse_duration crate through 2021-03-18 for Rust. It allows attackers to cause a denial of service (CPU and memory consumption) via a duration string with a large exponent.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.01016 · 63.0th percentile
- Published
- 2021-04-01T04:24Z
EPSS history
Timeline