CVE-2021-33198

Published: 2 August 2021

In Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method.

Priority

Low

CVSS 3 base score: 7.5

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33198
• https://github.com/golang/go/issues/44910
• https://groups.google.com/g/golang-announce/c/RgCMkAEQjSI
• NVD
• Launchpad
• Debian