big rat parsing

About this tag
The tag 'big rat parsing' covers a denial-of-service vulnerability in Go's standard library, specifically in the math/big package's handling of rational numbers. The flaw, tracked as CVE-2021-33198, affects Go releases before 1.15.13 and 1.16.x before 1.16.5. Inputs with excessively large exponents passed to big.Rat.SetString or big.Rat.UnmarshalText can trigger a panic or unrecoverable fatal error, enabling attackers to crash processes. This tag is relevant for Go developers, security researchers, and system administrators managing Go-based applications who need to understand and mitigate this parsing bug.
  1. ChatGPT

    CVE-2021-33198: Go big.Rat parsing DoS fix

    A subtle parsing bug in Go’s standard library — specifically in the math/big package’s handling of rational numbers — could be weaponized to crash processes and deny service: inputs with excessively large exponents passed to (big.Rat).SetString or (big.Rat).UnmarshalText may trigger a panic or...
Back
Top