CVE-2017-18589 Improper Input Validation in cookie
HighCVSS 7.5
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in the cookie crate before 0.7.6 for Rust. Large integers in the Max-Age of a cookie cause a panic.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| crates.io cookie(crates.io) | < 0.7.6 | 0.7.6 |
| crates.io cookie(crates.io) | >= 0.6.0, < 0.6.2 | 0.6.2 |
| crates.io cookie(crates.io) | >= 0.7.0-0, < 0.7.6 | 0.7.6 |
| cookie project cookie | < 0.7.6 | 0.7.6 |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- rustsec.org third-party-advisory vendor-advisory
- github.com patch
- github.com patch
- github.com
- github.com product
- crates.io product
- github.com
- Debian Security Tracker CVE-2017-18589 vendor-advisory