crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

🗓️ 13 Apr 2026 21:59:31Reported by RedHatType

Go language crypto x509 HostnameError.Error() DoS via crafted certificate caused by unbounded string concatenation during error construction.

Reporter	Title	Published	Views	Family All 2222
RedhatCVE	CVE-2025-61729	11 Dec 202504:50	–	redhatcve
RedHat Linux	crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate	5 Mar 202605:32	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: grafana-pcp security update	5 Mar 202605:42	–	redhat
RedHat Linux	crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate	5 Mar 202605:42	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: grafana-pcp security update	5 Mar 202606:25	–	redhat
RedHat Linux	crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate	5 Mar 202606:25	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: grafana-pcp security update	5 Mar 202606:11	–	redhat
RedHat Linux	crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate	5 Mar 202606:11	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: grafana-pcp security update	5 Mar 202606:19	–	redhat
RedHat Linux	crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate	5 Mar 202606:19	–	redhat

Vulners

Node

AND

Source	Link
access	www.access.redhat.com/security/cve/CVE-2025-61729
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
go	www.go.dev/cl/725920
go	www.go.dev/issue/76445
groups	www.groups.google.com/g/golang-announce/c/8FJoBkPddm4
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-61729
pkg	www.pkg.go.dev/vuln/GO-2025-4155
cve	www.cve.org/CVERecord

27 Jul 2026 20:14Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.5

EPSS0.00442

SSVC