CVE-2025-58187
BaseFortify
Publication date: 2025-10-29
Last updated on: 2025-11-20
Assigner: Go Project
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| golang | go | 1.25.3 |
| golang | go | From 1.25.0 (inc) to 1.25.2 (inc) |
| golang | go | 1.24.9 |
| golang | go | 1.25.2 |
| golang | go | 1.24.8 |
| golang | go | 1.25.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability arises from the design of the name constraint checking algorithm, where the processing time for certain inputs increases non-linearly as the size of the certificate grows. This means that programs validating arbitrary certificate chains may experience significantly longer processing times for some inputs.
How can this vulnerability impact me? :
The vulnerability can cause programs that validate certificate chains to take much longer to process certain inputs, potentially leading to performance degradation or denial of service if exploited with specially crafted certificates.