Astra Linux – Vulnerability in Golang-1.15

In Go versions before 1.15.13 and 1.16.x, as well as before 1.16.5, there might be a panic occurring when a large exponent is used in the math/big.RatSetString or Un MarshalText method...

EUVD-2021-19911

Malware in sbrugna...

BIT-GOLANG-2021-33198

In Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method...

SUSE CVE-2021-33198

In Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method...

The vulnerability of the `math/big.Rat` component and the `unmarshaltext` method in the Go programming language allows a malicious actor to trigger an unexpected error and restart the device.

The vulnerability of the math/big.Rat component and the unmarshaltext method in the Go programming language is related to uncontrolled memory allocation. Exploiting this vulnerability can allow an attacker to trigger a crash and restart of the device remotely...

DEBIAN-CVE-2021-33198

In Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method...

CVE-2021-33198

In Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method...

CVE-2021-33198

In Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method...

CVE-2021-33198

In Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method...

Design/Logic Flaw

In Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method...

CVE-2021-33198

CVE-2021-33198 affects Go (golang) math/big.Rat SetString and UnmarshalText when handling very large exponents, potentially causing a panic. Validated sources note the issue exists in Go before 1.15.13 and in 1.16.x before 1.16.5. Remediation is to update Go to at least 1.15.13 or 1.16.5 (or late...

CVE-2021-33198

In Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method...

CVE-2021-33198

In Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method...

CVE-2021-33198: Undefined Security Weakness

In Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method...

Denial Of Service (DoS)

go is vulnerable to denial of service. The vulnerability exists due to the SetString and UnmarshalText methods of math/big.Rat may cause the system to hang if it is passed with a very large exponent input...

PT-2021-6082 · Google +7 · Go +7

Name of the Vulnerable Software and Affected Versions: Go versions prior to 1.15.13 Go versions 1.16.x prior to 1.16.5 Description: The issue is related to the math/big.Rat component and the UnmarshalText method in the Go programming language, which can lead to uncontrolled memory allocation. Thi...