{"id":"CVE-2025-61724","sourceIdentifier":"security@golang.org","published":"2025-10-29T23:16:20.020","lastModified":"2026-10-08T10:10:00.227","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this can cause excessive CPU consumption."},{"lang":"es","value":"La función Reader.ReadResponse construye una cadena de respuesta mediante la concatenación repetida de cadenas de líneas. Cuando el número de líneas en una respuesta es grande, esto puede causar un consumo excesivo de CPU."}],"affected":[{"source":"security@golang.org","affectedData":[{"vendor":"Go standard library","product":"net/textproto","defaultStatus":"unaffected","collectionURL":"https://pkg.go.dev","packageName":"net/textproto","programRoutines":[{"name":"Reader.ReadResponse"}],"versions":[{"version":"0","lessThan":"1.24.8","versionType":"semver","status":"affected"},{"version":"1.25.0","lessThan":"1.25.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-30T14:22:06.282935Z","id":"CVE-2025-61724","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-770"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*","versionEndExcluding":"1.24.8","matchCriteriaId":"E1AB9501-4F7D-4E37-BA0A-4E57B082530C"},{"vulnerable":true,"criteria":"cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*","versionStartIncluding":"1.25.0","versionEndExcluding":"1.25.2","matchCriteriaId":"C196D175-EF20-476C-8C64-1B9F5C50AA2D"}]}]}],"references":[{"url":"https://go.dev/cl/709859","source":"security@golang.org","tags":["Patch"]},{"url":"https://go.dev/issue/75716","source":"security@golang.org","tags":["Issue Tracking"]},{"url":"https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI","source":"security@golang.org","tags":["Mailing List","Release Notes"]},{"url":"https://pkg.go.dev/vuln/GO-2025-4015","source":"security@golang.org","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2025/10/08/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Release Notes","Third Party Advisory"]}]}