CNNVD-202601-4673 Information

CNNVD ID

CNNVD-202601-4673

CVE-2025-61728

  • CNNVD Published: 2026-01-28

Description (Chinese)

Google Go是美国谷歌(Google)公司的一种静态强类型、编译型、并发型,并具有垃圾回收功能的编程语言。 Google Go存在安全漏洞,该漏洞源于使用超线性文件名索引算法,可能导致处理恶意ZIP存档时遭受拒绝服务攻击。

Description (English)

Google Go is a static type, compiler, hairdresser of Google and a programme language with a garbage recovery function. Google Go had a security loophole, which stemmed from the use of an overlined indexing algorithm, which could lead to a denial-of-service attack while handling malicious ZIP archiving.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

谷歌

Published

2026-01-28

Last Modified

2026-02-24

References

https://go.dev/cl/736713 https://go.dev/issue/77102 https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc https://pkg.go.dev/vuln/GO-2026-4342 http://www.openwall.com/lists/oss-security/2026/01/15/4

Patch

https://go.dev/dl/

Share on: