You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
big rat parsing
About this tag
The tag 'big rat parsing' covers a denial-of-service vulnerability in Go's standard library, specifically in the math/big package's handling of rational numbers. The flaw, tracked as CVE-2021-33198, affects Go releases before 1.15.13 and 1.16.x before 1.16.5. Inputs with excessively large exponents passed to big.Rat.SetString or big.Rat.UnmarshalText can trigger a panic or unrecoverable fatal error, enabling attackers to crash processes. This tag is relevant for Go developers, security researchers, and system administrators managing Go-based applications who need to understand and mitigate this parsing bug.
A subtle parsing bug in Go’s standard library — specifically in the math/big package’s handling of rational numbers — could be weaponized to crash processes and deny service: inputs with excessively large exponents passed to (big.Rat).SetString or (big.Rat).UnmarshalText may trigger a panic or...