CVE Vulnerabilities

CVE-2025-61725

Published: Oct 29, 2025 | Modified: Apr 15, 2026
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
5.3 MODERATE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

The ParseAddress function constructs domain-literal address components through repeated string concatenation. When parsing large domain-literal components, this can cause excessive CPU consumption.

Affected Software

NameVendorStart VersionEnd Version
Red Hat Hardened ImagesRedHatgolang1-26-main-1.26.2-1.hum1*
Red Hat Hardened ImagesRedHatgolang1-25-main-1.25.9-1.hum1*
Golang-1.10Ubuntuesm-infra/xenial*
Golang-1.13Ubuntuesm-apps/xenial*
Golang-1.18Ubuntuesm-apps/xenial*
Golang-1.23Ubuntuplucky*
Golang-1.24Ubuntuplucky*
Golang-1.6Ubuntuesm-infra/xenial*

References