Skip to content
OpenAdvisories

Package · Ubuntu

rust-time

2 known vulnerabilities.

2 results · Feed

  • Medium 6.8

    time affected by a stack exhaustion denial of service attack

    time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprec…

  • Medium 5.3
    CVE-2020-26235 Public exploit

    Segmentation fault in Rust time crate

    In Rust time crate from version 0.2.7 and before version 0.2.23, unix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires the user to set any environment variable in a different thread than the …