fugit contains time tools for flor and the floraison group. The fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausibility are impacted. A fix was released in fugit 1.11.1.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - fugit contains time tools for flor and the floraison group. The fugit natural parser, that turns every     wednesday at 5pm into 0 17 * * 3, accepted any length of input and went on attempting to parse it, not     returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit     dependents that do not check (user) input length for plausibility are impacted. A fix was released in     fugit 1.11.1. (CVE-2024-43380)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - fugit contains time tools for flor and the floraison group. The fugit "natural" parser, that turns "every
    wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not
    returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit
    dependents that do not check (user) input length for plausibility are impacted. A fix was released in
    fugit 1.11.1. (CVE-2024-43380)

ID	Name	Product	Family	Severity
257653	Linux Distros Unpatched Vulnerability : CVE-2024-43380	Nessus	Misc.	high
408984	SCA: security update for fugit (GHSA-2m96-52r3-2f3g)	Tenable Cloud Security	SCA Checks	medium
408984	SCA: security update for fugit (GHSA-2m96-52r3-2f3g)	Tenable Self-Hosted Container Security	SCA Checks	medium

Detections

Analytics

CVE-2024-43380

medium

Tenable Plugins

high

medium

medium