CVE-2023-24537

CVSS v3.1 7.5 (High)

EPSS 0.15 % (51^th)

Affected Products 1

Advisories 30

Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer overflow.

Weaknesses

CWE-190: Integer Overflow or Wraparound

CVE Status: PUBLISHED
CNA: Go Project
Published Date: 2023-04-06 16:15:07
(17 months ago)
Updated Date: 2023-11-25 11:15:14
(9 months ago)

Affected Products

Golang

Configuration #1

		CPE23	From	Up To
	Golang Go prior 1.19.8 version	cpe:2.3:a:golang:go		< 1.19.8
	Golang Go from 1.20.0 version and prior 1.20.3 version	cpe:2.3:a:golang:go	>= 1.20.0	< 1.20.3