PT-2025-42739 · Golang+4 · Golang+4

Jub0Bs · CVE-2025-58186 · Publicado 2025-01-01 · Atualizado 2026-07-30

Positive Technologies (AI Summary) · Pt

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Nome do Software Vulnerável e Versões Afetadas Versões do Golang 1.15 e 1.19

Descrição Existe uma falha na funcionalidade de processamento de cookies do pacote net/http. A falta de limites durante o processamento de cookies pode levar ao consumo excessivo de memória, potencialmente resultando em exaustão de memória.

Recomendações Atualize para uma versão mais recente que contenha uma correção para esta vulnerabilidade.

Correção

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

ALT-PU-2025-12749

ALT-PU-2025-13232

AZL-69140

AZL-69254

AZL-78911

BDU:2025-14529

BIT-GOLANG-2025-58186

CLEANSTART-2025-EU07511

CLEANSTART-2026-BI19096

CLEANSTART-2026-CL67452

CLEANSTART-2026-DG85765

CLEANSTART-2026-DK89443

CLEANSTART-2026-DX24417

CLEANSTART-2026-EH36582

CLEANSTART-2026-ES72297

CLEANSTART-2026-GK50991

CLEANSTART-2026-HO16255

CLEANSTART-2026-HP74907

CLEANSTART-2026-IC09970

CLEANSTART-2026-JL47330

CLEANSTART-2026-JV11945

CLEANSTART-2026-JW97006

CLEANSTART-2026-JY65496

CLEANSTART-2026-KF61159

CLEANSTART-2026-KK19266

CLEANSTART-2026-KL41807

CLEANSTART-2026-KQ90880

CLEANSTART-2026-LA96053

CLEANSTART-2026-LC57158

CLEANSTART-2026-LD38774

CLEANSTART-2026-LY84798

CLEANSTART-2026-MR40751

CLEANSTART-2026-MW42038

CLEANSTART-2026-NE76010

CLEANSTART-2026-OK95571

CLEANSTART-2026-OO10146

CLEANSTART-2026-PF69993

CLEANSTART-2026-PH30270

CLEANSTART-2026-PX55932

CLEANSTART-2026-QT53274

CLEANSTART-2026-RF77222

CLEANSTART-2026-RT37134

CLEANSTART-2026-RV11606

CLEANSTART-2026-RY70255

CLEANSTART-2026-SA78596

CLEANSTART-2026-SA81922

CLEANSTART-2026-SF49994

CLEANSTART-2026-SO47947

CLEANSTART-2026-ST87963

CLEANSTART-2026-TE81995

CLEANSTART-2026-TF97968

CLEANSTART-2026-UL50886

CLEANSTART-2026-UR38994

CLEANSTART-2026-VN16911

CLEANSTART-2026-VR76068

CLEANSTART-2026-VY69341

CLEANSTART-2026-WE55349

CLEANSTART-2026-WF25734

CLEANSTART-2026-WO16430

CLEANSTART-2026-WP03591

CLEANSTART-2026-WW79343

CLEANSTART-2026-WX54555

CLEANSTART-2026-XI63678

CLEANSTART-2026-XP01012

CLEANSTART-2026-XR35583

CLEANSTART-2026-XS86531

CLEANSTART-2026-XV43582

CLEANSTART-2026-XZ28830

CLEANSTART-2026-YT82900

CLEANSTART-2026-ZL51442

CLEANSTART-2026-ZN46983

CLEANSTART-2026-ZT09801

CLEANSTART-2026-ZU45532

CLEANSTART-2026-ZW09225

CVE-2025-58186

ECHO-5D63-3B88-E70A

GO-2025-4012

MGASA-2025-0256

OPENSUSE-SU-2025:15608-1

OPENSUSE-SU-2025:15609-1

OPENSUSE-SU-2025:15695-1

OPENSUSE-SU-2025:15723-1

OPENSUSE-SU-2025:20157-1

OPENSUSE-SU-2025:20158-1

OPENSUSE-SU-2026:20301-1

OPENSUSE-SU-2026:20308-1

OPENSUSE-SU-2026:21483-1

RHSA-2026:7291

RHSA-2026:7385

SUSE-SU-2025:03547-1

SUSE-SU-2025:21192-1

SUSE-SU-2025:21193-1

SUSE-SU-2025:3682-1

SUSE-SU-2026:0296-1

SUSE-SU-2026:0297-1

SUSE-SU-2026:0298-1

SUSE-SU-2026:0308-1

SUSE-SU-2026:20623-1

SUSE-SU-2026:20629-1

Produtos afetados

Alt Linux

Debian

Red Os

Suse

Golang

Referências · 2301

• https://github.com/golang/go/commit/100c5a66802b5a895b1d0e5ed3b7918f899c4833 · Nota
• https://github.com/golang/go/commit/c6b04dd33b0215f5deb83724661921842bf67607 · Nota
• https://github.com/golang/go/issues/75672 · Nota
• https://github.com/zabbix/zabbix/blob/master/src/go/go.mod · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-XR35583.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-LY84798.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-TF97968.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-NE76010.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-XS86531.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-LD38774.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-BI19096.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-QT53274.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-ST87963.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-ZN46983.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-SO47947.json · Nota