The vulnerability of the Equal() function in the crypto-x509 component of the Go programming language allows a perpetrator to trigger a service failure.

🗓️ 21 Nov 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec🔗 bdu.fstec.ru👁 11 Views

Go crypto/x509 Equal() has improper resource cleanup, enabling remote attackers to cause failures.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	1 Dec 202516:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Improper Certificate Validation in crypto/x509 [CVE-2025-58188]	14 Apr 202616:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	23 Jan 202620:43	–	ibm
IBM Security Bulletins	Security Bulletin: Certificate Name Constraints Algorithm Vulnerable to Non-Linear Processing DoS affects watsonx.data	8 Apr 202606:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images	24 Mar 202606:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container is vulnerable to denial of service and loss of confidentiality due to several findings in Golang binaries	19 Dec 202515:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities fixed in IBM SevOne Network Performance Management for July 2026	7 Aug 202617:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow containers January 2026	30 Jan 202617:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities for EDB Cloudpack for Data CP4D 5.3.1	1 Apr 202606:00	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities affect IBM watsonx Orchestrate with watsonx Assistant Cartridge	22 Jan 202602:58	–	ibm

Vulners

Node

OR

go goRange<1.24.8

go goRange1.25.0–1.25.2

Source	Link
github	www.github.com/zabbix/zabbix/blob/master/src/go/go.mod
pkg	www.pkg.go.dev/vuln/GO-2025-4013
go	www.go.dev/issue/75675
redos	www.redos.red-soft.ru/support/secure/uyazvimosti/uyazvimost-opentofu-cve-2025-58188-7.3/
redos	www.redos.red-soft.ru/support/secure/uyazvimosti-red-os-8-0/uyazvimost-mimir-cve-2025-58188-8.0/
web	www.web.nvd.nist.gov/view/vuln/detail

23 Jul 2026 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 37.5

CVSS 27.8

EPSS0.00381

Go programming language crypto x509 Equal function resource cleanup remote attackers service failures