| package: math/big | |
| stdlib: true | |
| versions: | |
| - introduced: go1.14 | |
| fixed: go1.14.12 | |
| - introduced: go1.15 | |
| fixed: go1.15.5 | |
| description: | | |
| A number of math/big.Int methods can panic when provided large inputs due | |
| to a flawed division method. | |
| published: 2021-04-14T12:00:00Z | |
| cve: CVE-2020-28362 | |
| symbols: | |
| - nat.divRecursiveStep | |
| links: | |
| pr: https://go-review.googlesource.com/c/go/+/269657 | |
| commit: https://github.com/golang/go/commit/1e1fa5903b760c6714ba17e50bf850b01f49135c | |
| context: | |
| - https://github.com/golang/go/issues/42552 |