blob: ee5bf985acacc1bec5cae450364390537d0ccbc8 [file] [log] [blame]
module: std
package: math/big
versions:
- introduced: go1.14
fixed: go1.14.12
- introduced: go1.15
fixed: go1.15.5
description: |
A number of math/big.Int methods can panic when provided large inputs due
to a flawed division method.
cves:
- CVE-2020-28362
symbols:
- nat.divRecursiveStep
links:
pr: https://go-review.googlesource.com/c/go/+/269657
commit: https://go.googlesource.com/go/+/1e1fa5903b760c6714ba17e50bf850b01f49135c
context:
- https://go.dev/issue/42552