CoreCVE
Back

HIGH

golang: math/big: panic during recursive division of very large numbers

Published Nov 18, 2020

Description

Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.

Affected products

Remediation

Red Hat statement

OpenShift ServiceMesh (OSSM) 1.1 is Out Of Support Scope (OOSS) for Moderate and Low impact vulnerabilities because it is now in the Maintenance Phase of the support. Openshift Virtualization 1 (formerly Container Native Virtualization) is Out Of Support Scope (OOSS) for Moderate and Low impact vulnerabilities. Red Hat Gluster Storage 3 shipped multi-cloud-object-gateway-cli and noobaa-operator container as a technical preview and is not currently planned to be addressed in future updates. OpenShift Container Platform (OCP) 4.5 and earlier are built with Go versions earlier than 1.14, which are not affected by this vulnerability. OCP 4.6 is built with Go 1.15 and is affected.

Metrics

Weaknesses (1)

CWE-295

Improper Certificate Validation

References (10)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Nov 18, 2020
Updated Aug 4, 2024
Reserved Nov 9, 2020
Link CVE-2020-28362
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2020-28362
Red Hat
Severity Moderate
Public date Nov 12, 2020
Links CVE-2020-28362 - Bugzilla