Cyber Resilience

CVE-2025-61729

Crypto Weakness in Golang Go ≤ 1.24.11

Published
02 December 2025
Modified
19 December 2025
Patch / advisory
CVSS Score v3.1 7.5
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0044 36th percentile
Risk Priority 55 floored blend · peak EPSS

Summary

CVE-2025-61729 is a high-severity Improper Certificate Validation (CWE-295) vulnerability in Golang Go. Its CVSS base score is 7.5 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Resource Hijacking (T1496); ranked at the 36th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified map to SC-5 (Denial-of-service Protection) and SI-10 (Information Input Validation) — see the control section below for these in your framework.

OWASP Top 10 for Web (2025)

EU & UK References

Vulnerability Data

Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by…

more

a malicious actor can result in excessive resource consumption.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1496 Resource Hijacking Impact
Adversaries may leverage the resources of co-opted systems to complete resource-intensive tasks, which may impact system and/or hosted service availability.
Why these techniques?

The vulnerability allows a malicious certificate to trigger excessive resource consumption (CPU/memory) via unbounded hostname concatenation in error handling, which can be leveraged for resource exhaustion attacks (T1496).

Confidence: MEDIUM · MITRE ATT&CK Enterprise v19.0

CVEs Like This One

CVE-2025-68121Same product: Golang Go
CVE-2026-32281Same product: Golang Go
CVE-2026-27137Same product: Golang Go
CVE-2025-58188Same product: Golang Go
CVE-2026-27138Same product: Golang Go
CVE-2025-61727Same product: Golang Go
CVE-2026-33810Same product: Golang Go
CVE-2026-27139Same product: Golang Go
CVE-2025-47906Same product: Golang Go
CVE-2026-27142Same product: Golang Go

Affected Assets

golang
go
≤ 1.24.11 · 1.25.0 — 1.25.5

Mitigating Controls

Control response

Prevent
Stop it (NIST 800-53)
  • SI-10 Information Input Validation
  • SC-5 Denial-of-service Protection
Detect
Catch it (NIST detect / respond)
  • SI-4 System Monitoring
Harden
Shrink the surface (DISA STIG)
  • 12 hardening rules · 3 OS baselines
Validate
Prove the fix (OWASP ASVS)

Mitigating Controls (NIST 800-53 r5) AI

prevent

Validates untrusted certificate hostname data before error-string construction to block unbounded input that triggers quadratic resource exhaustion.

prevent

Imposes resource limits and throttling on certificate processing paths to stop DoS from malicious certificates that exploit the HostnameError flaw.

detect

Monitors for anomalous CPU/memory spikes during certificate validation, enabling detection of exploitation attempts against the quadratic concatenation bug.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.AA-03 mostly match
prevents

Certificate-based authentication of users/services/hardware directly depends on correct validation.

PR.DS-02 mostly match
prevents

Proper certificate validation is a core mechanism for protecting data-in-transit confidentiality and integrity.

PR.PS-06 mostly match
prevents

Secure development practices explicitly include implementing correct certificate validation logic.

ID.RA-09 partial match
prevents

Assessing authenticity/integrity of acquired software often relies on code-signing certificate validation.

PR.AA-04 partial match
prevents

Identity assertions conveyed via certificates require validation to be verified.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

prevents

Requiring issuance and validation of public-key certificates under an approved policy reduces the chance that certificates with improper validation will be trusted.

Hardening callouts derived

Configuration rules from DISA STIG baselines that reduce the attack surface for weaknesses of the type cited by this CVE. Derived transitively via CVE→CWE→STIG over `controls_xwalks` (authoritative rows only).

Oracle Linux 8 (2 rules)
  • V-248574 YUM must be configured to prevent the installation of patches, service packs, device drivers, or OL 8 system components that have not been digitally signed using a certificate that is recognized and approved by the organization. via CWE-295
  • V-248575 OL 8 must prevent the installation of software, patches, service packs, device drivers, or operating system components of local packages without verification they have been digitally signed using a certificate that is issued by a Certificate Authority (CA) that is recognized and approved by the organization. via CWE-295
RHEL 7 (1 rule)
  • V-204447 The Red Hat Enterprise Linux operating system must prevent the installation of software, patches, service packs, device drivers, or operating system components from a repository without verification they have been digitally signed using a certificate that is issued by a Certificate Authority (CA) that is recognized and approved by the organization. via CWE-295
RHEL 8 (2 rules)
  • V-230264 RHEL 8 must prevent the installation of software, patches, service packs, device drivers, or operating system components from a repository without verification they have been digitally signed using a certificate that is issued by a Certificate Authority (CA) that is recognized and approved by the organization. via CWE-295
  • V-230265 RHEL 8 must prevent the installation of software, patches, service packs, device drivers, or operating system components of local packages without verification they have been digitally signed using a certificate that is issued by a Certificate Authority (CA) that is recognized and approved by the organization. via CWE-295

References