high7.5
CVE-2021-29932
An issue was discovered in the parse_duration crate through 2021-03-18 for Rust.
Impact
An issue was discovered in the parse_duration crate through 2021-03-18 for Rust. It allows attackers to cause a denial of service (CPU and memory consumption) via a duration string with a large exponent.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Parse Duration Project | Parse Duration | through 2021-03-18 |