crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

🗓️ 20 May 2026 11:57:59Reported by RedHatType

Golang flaw allows remote crafted certificates to trigger unbounded string concatenation in HostnameError, causing denial of service.

Reporter	Title	Published	Views	Family All 2336
RedhatCVE	CVE-2025-61729	11 Dec 202504:50	–	redhatcve
RedHat Linux	Important: Red Hat Security Advisory: Red Hat Web Terminal Operator 1.14.0 release.	9 Feb 202623:40	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: go-toolset:rhel8 security update	10 Feb 202613:45	–	redhat
RedHat Linux	crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate	10 Feb 202613:45	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: DevWorkspace Operator 0.39.0 release.	10 Feb 202615:32	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.26.0 Release.	10 Feb 202617:06	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: HawtIO 4.4.0 for Red Hat build of Apache Camel 4 Release and security update.	10 Jun 202615:39	–	redhat
RedHat Linux	crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate	10 Jun 202615:39	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Submariner v0.21 security fixes and container updates	10 Jun 202620:51	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: podman security update	11 Jun 202613:40	–	redhat

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	8	aarch64	podman	5:5.2.2-11.rhaos4.18.el8	podman-5:5.2.2-11.rhaos4.18.el8.aarch64.rpm
Red Hat Enterprise Linux	8	ppc64le	podman	5:5.2.2-11.rhaos4.18.el8	podman-5:5.2.2-11.rhaos4.18.el8.ppc64le.rpm
Red Hat Enterprise Linux	8	s390x	podman	5:5.2.2-11.rhaos4.18.el8	podman-5:5.2.2-11.rhaos4.18.el8.s390x.rpm
Red Hat Enterprise Linux	8	x86_64	podman	5:5.2.2-11.rhaos4.18.el8	podman-5:5.2.2-11.rhaos4.18.el8.x86_64.rpm
Red Hat Enterprise Linux	8	aarch64	podman-catatonit	5:5.2.2-11.rhaos4.18.el8	podman-catatonit-5:5.2.2-11.rhaos4.18.el8.aarch64.rpm
Red Hat Enterprise Linux	8	ppc64le	podman-catatonit	5:5.2.2-11.rhaos4.18.el8	podman-catatonit-5:5.2.2-11.rhaos4.18.el8.ppc64le.rpm
Red Hat Enterprise Linux	8	s390x	podman-catatonit	5:5.2.2-11.rhaos4.18.el8	podman-catatonit-5:5.2.2-11.rhaos4.18.el8.s390x.rpm
Red Hat Enterprise Linux	8	x86_64	podman-catatonit	5:5.2.2-11.rhaos4.18.el8	podman-catatonit-5:5.2.2-11.rhaos4.18.el8.x86_64.rpm
Red Hat Enterprise Linux	8	aarch64	podman-catatonit-debuginfo	5:5.2.2-11.rhaos4.18.el8	podman-catatonit-debuginfo-5:5.2.2-11.rhaos4.18.el8.aarch64.rpm
Red Hat Enterprise Linux	8	ppc64le	podman-catatonit-debuginfo	5:5.2.2-11.rhaos4.18.el8	podman-catatonit-debuginfo-5:5.2.2-11.rhaos4.18.el8.ppc64le.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2025-61729
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
go	www.go.dev/cl/725920
go	www.go.dev/issue/76445
groups	www.groups.google.com/g/golang-announce/c/8FJoBkPddm4
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-61729
pkg	www.pkg.go.dev/vuln/GO-2025-4155
cve	www.cve.org/CVERecord

18 Aug 2026 18:04Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.5

EPSS0.00464

SSVC