CVE-2022-32189
Assigner: Go
Published: 2022-08-09T20:17:59
State: PUBLISHED
title: Panic when decoding Float and Rat types in math/big
descriptions: value: A too-short encoded message can cause a panic in Float.GobDecode and Rat GobDecode in math/big in Go before 1.17.13 and 1.18.5, potentially allowing a denial of service.
affected: vendor: Go standard library
product: math/big
collectionURL: https://pkg.go.dev
packageName: math/big
versions: version: 0
lessThan: 1.17.13
status: affected
versionType: semver
version: 1.18.0-0
lessThan: 1.18.5
status: affected
versionType: semver
programRoutines: Float.GobDecode
Rat.GobDecode
defaultStatus: unaffected
problemTypes: descriptions: description: CWE 400: Uncontrolled Resource Consumption
credits: value: @catenacyber