blob: 038259bbf358e451cb0b25ae59671e1f1ab683f0 [file] [log] [blame]
package: math/big
stdlib: true
versions:
- introduced: go1.14
fixed: go1.14.12
- introduced: go1.15
fixed: go1.15.5
description: |
A number of math/big.Int methods can panic when provided large inputs due
to a flawed division method.
published: 2021-04-14T12:00:00Z
cve: CVE-2020-28362
symbols:
- nat.divRecursiveStep
links:
pr: https://go-review.googlesource.com/c/go/+/269657
commit: https://github.com/golang/go/commit/1e1fa5903b760c6714ba17e50bf850b01f49135c
context:
- https://github.com/golang/go/issues/42552