CVE-2025-61724: 
cAdvisor Analyse et atténuation des vulnérabilités

CVE-2025-61724 is a vulnerability discovered in the Go programming language's net/textproto package, specifically in the Reader.ReadResponse function. The vulnerability was disclosed on October 29, 2025, affecting multiple versions of Go before 1.24.8 and from 1.25.0 before 1.25.2. The issue involves excessive CPU consumption when processing response strings with a large number of lines (NVD, Go Project).

The vulnerability stems from the Reader.ReadResponse function's implementation, which constructs a response string through repeated string concatenation of lines. When processing responses containing a large number of lines, this implementation can result in excessive CPU consumption. The vulnerability has been assigned a CVSS v3.1 Base Score of 5.3 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L, indicating it is network-accessible with low attack complexity and no required privileges or user interaction (NVD).

The primary impact of this vulnerability is on system availability. When exploited, it can cause excessive CPU consumption in applications that process responses with a large number of lines, potentially leading to degraded system performance or denial of service conditions (Ubuntu, NVD).

The vulnerability has been fixed in Go versions 1.24.8 and 1.25.2. Users are advised to upgrade to these or later versions. For Go 1.24.x, upgrade to version 1.24.8 or later, and for Go 1.25.x, upgrade to version 1.25.2 or later. Packages built using affected versions of Go need to be rebuilt once the vulnerability has been fixed (Go Project, Ubuntu).