Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains.
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Wed, 17 Dec 2025 09:15:00 +0900

Type Values Removed Values Added
Weaknesses CWE-770
References
Metrics threat_severity

None

threat_severity

Moderate


Fri, 21 Nov 2025 07:30:00 +0900

Type Values Removed Values Added
Description Due to the design of the name constraint checking algorithm, the processing time of some inputs scals non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains.

Wed, 05 Nov 2025 07:30:00 +0900

Type Values Removed Values Added
References

Tue, 04 Nov 2025 05:15:00 +0900

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Fri, 31 Oct 2025 06:15:00 +0900

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Thu, 30 Oct 2025 23:45:00 +0900

Type Values Removed Values Added
First Time appeared Golang
Golang crypto
Vendors & Products Golang
Golang crypto

Thu, 30 Oct 2025 07:30:00 +0900

Type Values Removed Values Added
Description Due to the design of the name constraint checking algorithm, the processing time of some inputs scals non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains.
Title Quadratic complexity when checking name constraints in crypto/x509
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Go

Published:

Updated: 2025-11-20T22:23:47.179Z

Reserved: 2025-08-27T14:50:58.692Z

Link: CVE-2025-58187

cve-icon Vulnrichment

Updated: 2025-11-04T21:13:36.780Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-10-29T23:16:19.643

Modified: 2025-11-20T23:15:52.007

Link: CVE-2025-58187

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-10-29T22:10:12Z

Links: CVE-2025-58187 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2025-10-30T23:37:33Z

Weaknesses