CVE-2021-33198

golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents

Published Aug 2, 2021 CVSS 3.1 · 7.5 High EPSS 3.4% KEV · Not listed
Description
In Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2021-19911 In Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method.
History

No history.