7.5
High
CVE-2023-24537 Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can…
Description
Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer overflow.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| go/scanner 1.20 | 1.20.0-0 → < 1.20.3 | 1.20.3 |
| go/scanner 1.19 | earliest → < 1.19.8 | 1.19.8 |
References
- go.dev go.dev
- go.dev go.dev
- groups.google.com groups.google.com
- pkg.go.dev pkg.go.dev
- security.gentoo.org security.gentoo.org
Timeline
- Published
- Last modified