A too-short encoded message can cause a panic in Float.GobDecode and Rat GobDecode in math/big in Go before 1.17.13 and 1.18.5, potentially allowing a denial of service.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: Go

Published: 2022-08-09T20:17:59

Updated: 2024-08-03T07:32:56.026Z

Reserved: 2022-05-31T00:00:00

Link: CVE-2022-32189

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2022-08-10T20:15:47.507

Modified: 2023-03-03T15:39:14.423

Link: CVE-2022-32189

cve-icon Redhat

Severity : Low

Publid Date: 2022-08-01T00:00:00Z

Links: CVE-2022-32189 - Bugzilla