High WID-SEC-2025-2227 10 CVEs

Golang Go: Mehrere Schwachstellen

Published Oct 7, 2025 · Updated Oct 15, 2026 · Revision 100 · de-DE

Vendor: amazon Vendor: Dell Vendor: F5 Vendor: Fedora Vendor: golang Vendor: IBM Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: Splunk Vendor: SUSE Product: App Connect Enterprise Product: BIG-IP Product: Business Automation Workflow Product: Enterprise Product: Enterprise Linux Product: F5OS Product: Go Product: Integrated Dell Remote Access Controller Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: MQ Product: NetWorker Product: openshift Product: OpenStack Product: openSUSE Product: Rocky Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um einen Denial of Service Angriff durchzuführen oder andere, nicht näher spezifizierte Angriffe durchzuführen.

Product

Go ist eine quelloffene Programmiersprache.

Vulnerabilities 10

High 7.5

CVE-2025-58187

Quadratic complexity when checking name constraints in crypto/x509

Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains.

Go standard library crypto/x509 katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go

Oct 29, 2025
High 7.5

CVE-2025-58188

Panic when validating certificates with DSA public keys in crypto/x509

Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method. This affects programs which validate arbitrary certificate chains.

Go standard library crypto/x509 katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go

Oct 29, 2025
High 7.5

CVE-2025-61723

Quadratic complexity when parsing some invalid inputs in encoding/pem

The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. This affects programs which parse untrusted PEM inputs.

Go standard library encoding/pem katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go

Oct 29, 2025
High 7.5

CVE-2025-61725

Excessive CPU consumption in ParseAddress in net/mail

The ParseAddress function constructs domain-literal address components through repeated string concatenation. When parsing large domain-literal components, this can cause excessive CPU consumption.

Go standard library net/mail katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go

Oct 29, 2025
Medium 5.3

CVE-2025-47912

Insufficient validation of bracketed IPv6 hostnames in net/url

The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed within square brackets. For example: "http://[…

Go standard library net/url katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go

Oct 29, 2025
Medium 5.3

CVE-2025-58185

Parsing DER payload can cause memory exhaustion in encoding/asn1

Parsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory exhaustion.

Go standard library encoding/asn1 katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go

Oct 29, 2025
Medium 5.3

CVE-2025-58186

Lack of limit when parsing cookies can cause memory exhaustion in net/http

Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit. By sending a lot of very small cookies such as "a=;", an attacker can make an HTTP server allocate a large amount of structs, causing large mem…

Go standard library net/http katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go

Oct 29, 2025
Medium 5.3

CVE-2025-58189

ALPN negotiation error contains attacker controlled information in crypto/tls

When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information (the ALPN protocols sent by the client) which is not escaped.

Go standard library crypto/tls katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go

Oct 29, 2025
Medium 5.3

CVE-2025-61724

Excessive CPU consumption in Reader.ReadResponse in net/textproto

The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this can cause excessive CPU consumption.

Go standard library net/textproto katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go

Oct 29, 2025
Medium 4.3

CVE-2025-58183

Unbounded allocation when parsing GNU sparse map in archive/tar

tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archiv…

Go standard library archive/tar katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go

Oct 29, 2025

Revision history

2026-10-15 #100
Neue Updates von Red Hat aufgenommen
2026-08-18 #99
Neue Updates von Red Hat aufgenommen
2026-07-28 #98
Neue Updates von Red Hat aufgenommen
2026-07-27 #97
Neue Updates von Red Hat aufgenommen
2026-07-19 #96
Neue Updates von Red Hat aufgenommen
2026-07-08 #95
Neue Updates von Oracle Linux aufgenommen
2026-06-30 #94
Neue Updates von F5 aufgenommen
2026-06-28 #93
Neue Updates von Red Hat aufgenommen
2026-06-25 #92
Neue Updates von Dell und Red Hat aufgenommen
2026-06-16 #91
Neue Updates von Red Hat aufgenommen
2026-06-04 #90
Neue Updates von Red Hat aufgenommen
2026-05-28 #89
Neue Updates von Red Hat aufgenommen
2026-05-26 #88
Neue Updates von Red Hat aufgenommen
2026-05-25 #87
Neue Updates von Red Hat aufgenommen
2026-05-21 #86
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
2026-05-20 #85
Neue Updates von Red Hat aufgenommen
2026-05-04 #84
Neue Updates von Red Hat aufgenommen
2026-05-03 #83
Neue Updates von Red Hat aufgenommen
2026-04-26 #82
Neue Updates von Red Hat aufgenommen
2026-04-15 #81
Neue Updates von Red Hat aufgenommen
2026-04-14 #80
Neue Updates von Red Hat aufgenommen
2026-04-09 #79
Neue Updates von Red Hat aufgenommen
2026-04-01 #78
Neue Updates von Oracle Linux und Red Hat aufgenommen
2026-03-30 #77
Neue Updates von Red Hat aufgenommen
2026-03-25 #76
Neue Updates von Red Hat aufgenommen

References

Red Hat Security Advisory RHSA-2025:23421 vom 2025-12-17
https://access.redhat.com/errata/RHSA-2025:23421
SUSE Security Update SUSE-SU-2025:21193-1 vom 2025-12-15
https://lists.suse.com/pipermail/sle-security-updates/2025-December/023548.html
SUSE Security Update SUSE-SU-2025:21192-1 vom 2025-12-15
https://lists.suse.com/pipermail/sle-security-updates/2025-December/023549.html
Google Mailing List vom 2025-10-07
https://groups.google.com/g/golang-nuts/c/Gxn25BP4MXk/m/3KrM-XBOBAAJ
OSS Security Mailing List vom 2025-10-07
https://seclists.org/oss-sec/2025/q4/18
openSUSE Security Update OPENSUSE-SU-2025:15609-1 vom 2025-10-09
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5U2RZ5ZQ7QZC7Q64L5ZGYYRBUCDDWOHV/
openSUSE Security Update OPENSUSE-SU-2025:15608-1 vom 2025-10-09
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BPJE7TJNEWQ7LAT33ZWEYXIPJXK2CYFL/
SUSE Security Update SUSE-SU-2025:03547-1 vom 2025-10-13
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PWLY3ERCTOOMT2WHA3W4RFDL5R5D6NI2/
SUSE Security Update SUSE-SU-2025:3682-1 vom 2025-10-20
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QSN7GBHICQT7L4ZW4AZLM43XGTLQRK2J/
Amazon Linux Security Advisory ALAS2-2025-3042 vom 2025-10-27
https://alas.aws.amazon.com/AL2/ALAS2-2025-3042.html
Fedora Security Advisory FEDORA-2025-01148DE25A vom 2025-10-31
https://bodhi.fedoraproject.org/updates/FEDORA-2025-01148de25a
Fedora Security Advisory FEDORA-2025-AF04521261 vom 2025-10-31
https://bodhi.fedoraproject.org/updates/FEDORA-2025-af04521261
Fedora Security Advisory FEDORA-2025-AC008831D6 vom 2025-11-05
https://bodhi.fedoraproject.org/updates/FEDORA-2025-ac008831d6
Fedora Security Advisory FEDORA-2025-D1DADE0612 vom 2025-11-05
https://bodhi.fedoraproject.org/updates/FEDORA-2025-d1dade0612
Fedora Security Advisory FEDORA-2025-122A933CAD vom 2025-11-05
https://bodhi.fedoraproject.org/updates/FEDORA-2025-122a933cad
openSUSE Security Update OPENSUSE-SU-2025:15703-1 vom 2025-11-05
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KSDUD5LF2MRRU5JTCCP7MOV3FLUVTXLX/
Fedora Security Advisory FEDORA-2025-C1B04CBABA vom 2025-11-05
https://bodhi.fedoraproject.org/updates/FEDORA-2025-c1b04cbaba
Amazon Linux Security Advisory ALAS2DOCKER-2025-078 vom 2025-11-06
https://alas.aws.amazon.com/AL2/ALAS2DOCKER-2025-078.html
Amazon Linux Security Advisory ALAS2ECS-2025-077 vom 2025-11-06
https://alas.aws.amazon.com/AL2/ALAS2ECS-2025-077.html
Amazon Linux Security Advisory ALAS2NITRO-ENCLAVES-2025-072 vom 2025-11-06
https://alas.aws.amazon.com/AL2/ALAS2NITRO-ENCLAVES-2025-072.html
GitHub Security Advisory GHSA-W2JF-268Q-MRVH vom 2025-11-06
https://github.com/advisories/GHSA-w2jf-268q-mrvh
openSUSE Security Update OPENSUSE-SU-2025:15711-1 vom 2025-11-08
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GSOQN2RH4GB4EVS4NWCVCQNETV2DXDNY/
Amazon Linux Security Advisory ALAS2ECS-2025-082 vom 2025-11-11
https://alas.aws.amazon.com/AL2/ALAS2ECS-2025-082.html
Amazon Linux Security Advisory ALAS2-2025-3069 vom 2025-11-11
https://alas.aws.amazon.com/AL2/ALAS2-2025-3069.html
Amazon Linux Security Advisory ALAS2-2025-3070 vom 2025-11-11
https://alas.aws.amazon.com/AL2/ALAS2-2025-3070.html
Amazon Linux Security Advisory ALAS2-2025-3071 vom 2025-11-11
https://alas.aws.amazon.com/AL2/ALAS2-2025-3071.html
Amazon Linux Security Advisory ALAS2DOCKER-2025-080 vom 2025-11-11
https://alas.aws.amazon.com/AL2/ALAS2DOCKER-2025-080.html
Amazon Linux Security Advisory ALAS2DOCKER-2025-081 vom 2025-11-11
https://alas.aws.amazon.com/AL2/ALAS2DOCKER-2025-081.html
Amazon Linux Security Advisory ALAS2DOCKER-2025-082 vom 2025-11-11
https://alas.aws.amazon.com/AL2/ALAS2DOCKER-2025-082.html
Amazon Linux Security Advisory ALAS2DOCKER-2025-085 vom 2025-11-11
https://alas.aws.amazon.com/AL2/ALAS2DOCKER-2025-085.html
Amazon Linux Security Advisory ALAS2ECS-2025-078 vom 2025-11-11
https://alas.aws.amazon.com/AL2/ALAS2ECS-2025-078.html
Amazon Linux Security Advisory ALAS2DOCKER-2025-079 vom 2025-11-11
https://alas.aws.amazon.com/AL2/ALAS2DOCKER-2025-079.html
Amazon Linux Security Advisory ALAS2DOCKER-2025-083 vom 2025-11-11
https://alas.aws.amazon.com/AL2/ALAS2DOCKER-2025-083.html
Amazon Linux Security Advisory ALAS2DOCKER-2025-084 vom 2025-11-11
https://alas.aws.amazon.com/AL2/ALAS2DOCKER-2025-084.html
Amazon Linux Security Advisory ALAS2ECS-2025-079 vom 2025-11-11
https://alas.aws.amazon.com/AL2/ALAS2ECS-2025-079.html
Amazon Linux Security Advisory ALAS2ECS-2025-080 vom 2025-11-11
https://alas.aws.amazon.com/AL2/ALAS2ECS-2025-080.html
Amazon Linux Security Advisory ALAS2ECS-2025-081 vom 2025-11-11
https://alas.aws.amazon.com/AL2/ALAS2ECS-2025-081.html
Amazon Linux Security Advisory ALAS2NITRO-ENCLAVES-2025-073 vom 2025-11-11
https://alas.aws.amazon.com/AL2/ALAS2NITRO-ENCLAVES-2025-073.html
Amazon Linux Security Advisory ALAS2NITRO-ENCLAVES-2025-074 vom 2025-11-11
https://alas.aws.amazon.com/AL2/ALAS2NITRO-ENCLAVES-2025-074.html
Amazon Linux Security Advisory ALAS2NITRO-ENCLAVES-2025-075 vom 2025-11-11
https://alas.aws.amazon.com/AL2/ALAS2NITRO-ENCLAVES-2025-075.html
Amazon Linux Security Advisory ALAS2NITRO-ENCLAVES-2025-076 vom 2025-11-11
https://alas.aws.amazon.com/AL2/ALAS2NITRO-ENCLAVES-2025-076.html
Amazon Linux Security Advisory ALAS2NITRO-ENCLAVES-2025-077 vom 2025-11-11
https://alas.aws.amazon.com/AL2/ALAS2NITRO-ENCLAVES-2025-077.html
Fedora Security Advisory FEDORA-EPEL-2025-F63E98E319 vom 2025-11-17
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-f63e98e319
Fedora Security Advisory FEDORA-2025-E14E668AFA vom 2025-11-19
https://bodhi.fedoraproject.org/updates/FEDORA-2025-e14e668afa
Fedora Security Advisory FEDORA-2025-15C3D1DCFC vom 2025-11-19
https://bodhi.fedoraproject.org/updates/FEDORA-2025-15c3d1dcfc
Fedora Security Advisory FEDORA-2025-3E35532D2A vom 2025-11-19
https://bodhi.fedoraproject.org/updates/FEDORA-2025-3e35532d2a
Red Hat Security Advisory RHSA-2025:21779 vom 2025-11-20
https://access.redhat.com/errata/RHSA-2025:21779
Red Hat Security Advisory RHSA-2025:21778 vom 2025-11-20
https://access.redhat.com/errata/RHSA-2025:21778
Red Hat Security Advisory RHSA-2025:21815 vom 2025-11-20
https://access.redhat.com/errata/RHSA-2025:21815
Red Hat Security Advisory RHSA-2025:21816 vom 2025-11-20
https://access.redhat.com/errata/RHSA-2025:21816
Red Hat Security Advisory RHSA-2025:21856 vom 2025-11-20
https://access.redhat.com/errata/RHSA-2025:21856
Rocky Linux Security Advisory RLSA-2025:21815 vom 2025-11-21
https://errata.build.resf.org/RLSA-2025:21815
Fedora Security Advisory FEDORA-2025-45A7DD8F10 vom 2025-11-25
https://bodhi.fedoraproject.org/updates/FEDORA-2025-45a7dd8f10
Red Hat Security Advisory RHSA-2025:22011 vom 2025-11-25
https://access.redhat.com/errata/RHSA-2025:22011
Red Hat Security Advisory RHSA-2025:22012 vom 2025-11-25
https://access.redhat.com/errata/RHSA-2025:22012
Red Hat Security Advisory RHSA-2025:21964 vom 2025-11-24
https://access.redhat.com/errata/RHSA-2025:21964
Fedora Security Advisory FEDORA-2025-6B2336EC55 vom 2025-11-25
https://bodhi.fedoraproject.org/updates/FEDORA-2025-6b2336ec55
Fedora Security Advisory FEDORA-2025-C7F4367479 vom 2025-11-25
https://bodhi.fedoraproject.org/updates/FEDORA-2025-c7f4367479
Red Hat Security Advisory RHSA-2025:22030 vom 2025-11-25
https://access.redhat.com/errata/RHSA-2025:22030
Oracle Linux Security Advisory ELSA-2025-21815 vom 2025-11-26
https://linux.oracle.com/errata/ELSA-2025-21815.html
SUSE Security Update SUSE-SU-2025:4220-1 vom 2025-11-25
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UOLZYXYXKUYHDTMI5MUWYMLKG6RQQB3S/
Oracle Linux Security Advisory ELSA-2025-22011 vom 2025-11-26
https://linux.oracle.com/errata/ELSA-2025-22011.html
Red Hat Security Advisory RHSA-2025:22181 vom 2025-11-26
https://access.redhat.com/errata/RHSA-2025:22181
Rocky Linux Security Advisory RLSA-2025:21816 vom 2025-11-27
https://errata.build.resf.org/RLSA-2025:21816
Red Hat Security Advisory RHSA-2025:22345 vom 2025-11-28
https://access.redhat.com/errata/RHSA-2025:22345
Rocky Linux Security Advisory RLSA-2025:22011 vom 2025-11-28
https://errata.build.resf.org/RLSA-2025:22011
Rocky Linux Security Advisory RLSA-2025:22012 vom 2025-11-28
https://errata.build.resf.org/RLSA-2025:22012
Red Hat Security Advisory RHSA-2025:22255 vom 2025-12-02
https://access.redhat.com/errata/RHSA-2025:22255
Oracle Linux Security Advisory ELSA-2025-22012 vom 2025-12-03
https://linux.oracle.com/errata/ELSA-2025-22012.html
Red Hat Security Advisory RHSA-2025:22668 vom 2025-12-03
https://access.redhat.com/errata/RHSA-2025:22668
Oracle Linux Security Advisory ELSA-2025-21816 vom 2025-12-03
https://linux.oracle.com/errata/ELSA-2025-21816.html
Red Hat Security Advisory RHSA-2025:22743 vom 2025-12-04
https://access.redhat.com/errata/RHSA-2025:22743
Red Hat Security Advisory RHSA-2025:22738 vom 2025-12-04
https://access.redhat.com/errata/RHSA-2025:22738
Rocky Linux Security Advisory RLSA-2025:22668 vom 2025-12-04
https://errata.build.resf.org/RLSA-2025:22668
Red Hat Security Advisory RHSA-2025:22759 vom 2025-12-04
https://access.redhat.com/errata/RHSA-2025:22759
Amazon Linux Security Advisory ALAS2-2025-3079 vom 2025-12-08
https://alas.aws.amazon.com/AL2/ALAS2-2025-3079.html
Oracle Linux Security Advisory ELSA-2025-22668 vom 2025-12-09
http://linux.oracle.com/errata/ELSA-2025-22668.html
Amazon Linux Security Advisory ALAS2-2025-3078 vom 2025-12-08
https://alas.aws.amazon.com/AL2/ALAS2-2025-3078.html
Amazon Linux Security Advisory ALAS2ECS-2025-083 vom 2025-12-08
https://alas.aws.amazon.com/AL2/ALAS2ECS-2025-083.html
Red Hat Security Advisory RHSA-2025:22899 vom 2025-12-09
https://access.redhat.com/errata/RHSA-2025:22899