The ParseAddress function constructeds domain-literal address components through repeated string concatenation. When parsing large domain-literal components, this can cause excessive CPU consumption.
Metrics
Affected Vendors & Products
References
History
Fri, 31 Oct 2025 00:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-770 | |
| References |
| |
| Metrics |
threat_severity
|
threat_severity
|
Thu, 30 Oct 2025 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
cvssV3_1
|
Thu, 30 Oct 2025 14:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Golang
Golang mail |
|
| Vendors & Products |
Golang
Golang mail |
Wed, 29 Oct 2025 22:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The ParseAddress function constructeds domain-literal address components through repeated string concatenation. When parsing large domain-literal components, this can cause excessive CPU consumption. | |
| Title | Excessive CPU consumption in ParseAddress in net/mail | |
| References |
|
Status: PUBLISHED
Assigner: Go
Published: 2025-10-29T22:10:12.255Z
Updated: 2025-10-30T20:33:15.649Z
Reserved: 2025-09-30T15:05:03.605Z
Link: CVE-2025-61725
Updated: 2025-10-30T20:33:05.760Z
Status : Awaiting Analysis
Published: 2025-10-29T23:16:20.113
Modified: 2025-10-30T21:15:37.190
Link: CVE-2025-61725