CVE-2025-58181

EPSS 0.08%
Veröffentlicht 19.11.2025 20:33:42
Zuletzt bearbeitet 11.12.2025 19:29:24
Quelle security@golang.org
CVE-Watchlists
Login
Unerledigt
Login

SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Golang ≫ Crypto SwPlatformgo Version < 0.45.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.08%	0.244

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-770 Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA

Mailing List

https://go.dev/cl/721961

Patch

https://go.dev/issue/76363

Issue Tracking

https://pkg.go.dev/vuln/GO-2025-4134

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-58181

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-58181

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-58181

EUVD