CVE-2022-23772
Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption.
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption.
Paquets affectés
Bitnami
golang
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.16.14"},{"introduced":"1.17.0"},{"fixed":"1.17.7"}]}]
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2022-23772 golang-1.15 Corrigé dans: 1.15.15-1~deb11u3
Références
- advisory groups.google.com
- advisory lists.debian.org
- advisory lists.debian.org
- advisory security.gentoo.org
- advisory security.netapp.com
- advisory oracle.com
- web nvd.nist.gov