CVE-2022-23772
Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption.
Original description
The description as published by the source.
Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption.
Affected packages
Bitnami
golang
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.16.14"},{"introduced":"1.17.0"},{"fixed":"1.17.7"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2022-23772 golang-1.15 Fixed in: 1.15.15-1~deb11u3
References
- advisory groups.google.com
- advisory lists.debian.org
- advisory lists.debian.org
- advisory security.gentoo.org
- advisory security.netapp.com
- advisory oracle.com
- web nvd.nist.gov