go -- math/big: panic during recursive division of very large numbers; cmd/go: arbitrary code execution at build time through cgoentered 2020-11-12
no CVE referenced
CVE details
CVE-2020-28366
Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a malicious unquoted symbol name in a linked object file.
- Score
- 7.5 high
- Published
- 2020-11-18
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.