Uncontrolled memory consumption in math/big

高危 7.5CVE-2022-23772 · BIT-golang-2022-23772 · GO-2021-0317 · Published 11/02/2022 · updated 17/06/2026

要点

Package	Affected versions	Patched versions
stdlib Go	`≥ 1.17.0-0, < 1.17.7< 1.16.14`	`1.17.71.16.14`
go golang	`≥ 1.17.0, < 1.17.7< 1.16.14`	`1.17.71.16.14`

Rat.SetString had an overflow issue that can lead to uncontrolled memory consumption.

NVD description

Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

≥ 1.17.0-0, < 1.17.7< 1.16.14

1.17.71.16.14

≥ 1.17.0, < 1.17.7< 1.16.14

1.17.71.16.14

stdlib 的其他漏洞

查看全部 →