CNNVD-202510-3925 Information
Oct 29, 2025
cve
CNNVD ID
CNNVD-202510-3925
Related CVE
- CNNVD Published: 2025-10-29
Description (Chinese)
Google Go是美国谷歌（Google）公司的一种静态强类型、编译型、并发型，并具有垃圾回收功能的编程语言。 Google Go存在安全漏洞，该漏洞源于Reader.ReadResponse函数通过重复字符串连接构造响应字符串，当响应行数过大时可能导致CPU消耗过高。
Description (English)
Google Go is a static type, compiler, hairdresser of Google and a programme language with a garbage recovery function. Google Go has a security loophole, which stems from the Reder.ReadResponse function ’ s ability to construct a response string by a repeat string connection, which can lead to overconsumption of CPUs when the number of response lines is too large.
Hazard Level
Medium
Vulnerability Type
其他
Affected Vendor
谷歌
Published
2025-10-29
Last Modified
2026-02-24
References
https://go.dev/cl/709859 https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI https://go.dev/issue/75716 https://pkg.go.dev/vuln/GO-2025-4015 https://access.redhat.com/security/cve/cve-2025-61724