CVE-2025-61725 is a high-severity vulnerability in the Go standard library's net/mail package. The ParseAddress function inefficiently constructs domain-literal address components using repeated string concatenation, which can lead to excessive CPU consumption when processing large domain-literal components. This results in a denial of service condition due to resource exhaustion. The vulnerability affects Go versions up to 1.25.0. No official patch or remediation guidance is currently available, and no known exploits have been reported in the wild.
CVE-2025-61724 is a medium severity vulnerability in the Go standard library's net/textproto package. The Reader.ReadResponse function uses repeated string concatenation to build response strings from multiple lines, causing inefficient algorithmic complexity. This inefficiency can lead to excessive CPU consumption and denial of service due to resource exhaustion. There is no impact on confidentiality or integrity. No patch or official fix has been confirmed yet.
The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. This affects programs which parse untrusted PEM inputs.
Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains.
Starlette is a lightweight ASGI framework/toolkit. Starting in version 0.39.0 and prior to version 0.49.1 , an unauthenticated attacker can send a crafted HTTP Range header that triggers quadratic-time processing in Starlette's FileResponse Range parsing/merging logic. This enables CPU exhaustion per request, causing denial‑of‑service for endpoints serving files (e.g., StaticFiles or any use of FileResponse). This vulnerability is fixed in 0.49.1.
The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.
Security Fix(es):
* libtasn1: Inefficient DER Decoding in libtasn1 Leading to Potential Remote DoS (CVE-2024-12133)
* gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification (CVE-2025-14831)
* gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison (CVE-2026-3833)
* gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment (CVE-2026-33845)
* gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly (CVE-2026-33846)
* gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009)
* gnutls: gnutls: Authentication Bypass via NUL Character in Username (CVE-2026-42010)
* gnutls: gnutls: Security bypass due to incorrect name constraint handling (CVE-2026-42011)
* gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs (CVE-2026-42012)
* gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name (CVE-2026-42013)
* gnutls: gnutls: Information disclosure via heap overread in RSA key exchange (CVE-2026-5260)
* gnutls: Fix use-after-free in gnutls_pkcs11_token_set_pin (CVE-2026-42014)
* gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling (CVE-2026-42015)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVE-2024-12243 is a vulnerability in GnuTLS caused by an inefficient algorithm in the libtasn1 library used for ASN.1 data processing. This inefficiency can cause excessive processing time when decoding certain DER-encoded certificate data. A remote attacker can exploit this by sending a specially crafted certificate, leading to GnuTLS becoming unresponsive or slow, resulting in a denial-of-service (DoS) condition. The vulnerability has a medium severity with a CVSS score of 5.3. Red Hat has released patches addressing this issue in their advisory RHSA-2025:17361.
CVE-2024-43485 is a high-severity denial of service vulnerability in Microsoft .NET 6.0 and related versions caused by inefficient algorithmic complexity. This flaw can be exploited remotely without authentication to cause application unavailability. Microsoft has released official fixes for all affected versions.
CVE-2024-43484 is a denial of service vulnerability in Microsoft .NET 6.0 and related frameworks caused by inefficient algorithmic complexity. It affects multiple versions of .NET, .NET Framework, and Visual Studio. The flaw allows an unauthenticated attacker to cause a denial of service condition. Microsoft has released official fixes for all affected versions.
CVE-2024-43483 is a denial of service vulnerability in Microsoft .NET 6.0 and related frameworks caused by inefficient algorithmic complexity. It affects multiple versions of .NET 6.0, 8.0, and earlier .NET Framework releases. The flaw can be exploited remotely without privileges or user interaction to cause service disruption. Microsoft has released official fixes for all affected versions.
Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation (CBOR) versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application's use of this library, this may be a remote attacker.
PeterO.Cbor versions 4.0.0 through 4.5.0 are vulnerable to a denial of
service vulnerability. An attacker may trigger the denial of service
condition by providing crafted data to the DecodeFromBytes or other
decoding mechanisms in PeterO.Cbor. Depending on the usage of the
library, an unauthenticated and remote attacker may be able to cause the
denial of service condition.