crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

🗓️ 16 Jul 2026 14:35:59Reported by RedHatType

redhat🔗 access.redhat.com👁 20 Views

Crafted certificate triggers unbounded string concatenation in HostnameError.Error(), causing DoS in Go x509.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Improper Certificate Validation in crypto/x509 [CVE-2025-61729]	14 Apr 202616:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities addressed with IBM Business Automation Workflow cumulative fixes April 2026	27 May 202615:10	–	ibm
IBM Security Bulletins	Security Bulletin: Certificate Name Constraints Bypass via Wildcard SANs affects watsonx.data	8 Apr 202610:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with Cloud Pak foundational services 4.18.0 shipped with IBM Cloud Pak for Business Automation iFixes for June 2026	29 Jun 202610:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to loss of confidentiality (CVE-2025-61727) and denial of service (CVE-2025-61729)	5 Feb 202612:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affecting IBM Watson Studio in Cloud Pak for Data.	24 Aug 202609:51	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (February 2026)	27 Feb 202603:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with Cloud Pak foundational services 4.18 shipped with IBM Business Automation Workflow containers June 2026	29 Jun 202610:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Planning Analytics	16 Mar 202621:53	–	ibm
IBM Security Bulletins	Security Bulletin: Impacted IBM optim 1.0.0, 1.1.0 (optim-spark) by vulnerabilities in crypto/x509 package.	21 Sep 202617:03	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	9	aarch64	flightctl-agent	1.1.3-1.el9em	flightctl-agent-1.1.3-1.el9em.aarch64.rpm
Red Hat Enterprise Linux	9	ppc64le	flightctl-agent	1.1.3-1.el9em	flightctl-agent-1.1.3-1.el9em.ppc64le.rpm
Red Hat Enterprise Linux	9	s390x	flightctl-agent	1.1.3-1.el9em	flightctl-agent-1.1.3-1.el9em.s390x.rpm
Red Hat Enterprise Linux	9	x86_64	flightctl-agent	1.1.3-1.el9em	flightctl-agent-1.1.3-1.el9em.x86_64.rpm
Red Hat Enterprise Linux	10	aarch64	flightctl-agent	1.1.3-1.el10em	flightctl-agent-1.1.3-1.el10em.aarch64.rpm
Red Hat Enterprise Linux	10	ppc64le	flightctl-agent	1.1.3-1.el10em	flightctl-agent-1.1.3-1.el10em.ppc64le.rpm
Red Hat Enterprise Linux	10	s390x	flightctl-agent	1.1.3-1.el10em	flightctl-agent-1.1.3-1.el10em.s390x.rpm
Red Hat Enterprise Linux	10	x86_64	flightctl-agent	1.1.3-1.el10em	flightctl-agent-1.1.3-1.el10em.x86_64.rpm
Red Hat Enterprise Linux	9	aarch64	flightctl-cli	1.1.3-1.el9em	flightctl-cli-1.1.3-1.el9em.aarch64.rpm
Red Hat Enterprise Linux	9	ppc64le	flightctl-cli	1.1.3-1.el9em	flightctl-cli-1.1.3-1.el9em.ppc64le.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2025-61729
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
go	www.go.dev/cl/725920
go	www.go.dev/issue/76445
groups	www.groups.google.com/g/golang-announce/c/8FJoBkPddm4
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-61729
pkg	www.pkg.go.dev/vuln/GO-2025-4155
cve	www.cve.org/CVERecord

03 Oct 2026 10:13Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.17.5

EPSS0.00457

SSVC

crafted certificate hostname error unbounded concatenation denial of service go x509 vulnerability