7.5
Élevée
CVE-2023-24537 Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can…
Description
Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer overflow.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| go/scanner 1.20 | 1.20.0-0 → < 1.20.3 | 1.20.3 |
| go/scanner 1.19 | premières → < 1.19.8 | 1.19.8 |
Références
- go.dev go.dev
- go.dev go.dev
- groups.google.com groups.google.com
- pkg.go.dev pkg.go.dev
- security.gentoo.org security.gentoo.org
Chronologie
- Publiée
- Dernière modification