VDB
RHSA-2026%3A3111
RHSA-2026%3A3111
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:df1eda79b316a9623d0c414d45df70355ce002c2461b31d9e60dc4cfea48cff0_amd64 as a component of Red Hat OpenShift Service Mesh 3.2 | *, *, * |
| Red Hat | registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:ef738fd2162041bdaff38185f08a6860e760eabff83644c89aa14db85a972043_amd64 as a component of Red Hat OpenShift Service Mesh 3.2 | *, registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:ef738fd2162041bdaff38185f08a6860e760eabff83644c89aa14db85a972043_amd64, * |
| Red Hat | registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:91da42912bf5a9204ce9d0a58dba1132fea18a87d3fbebaa3fa47ea8c0cd9f9c_s390x as a component of Red Hat OpenShift Service Mesh 3.2 | registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:91da42912bf5a9204ce9d0a58dba1132fea18a87d3fbebaa3fa47ea8c0cd9f9c_s390x, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:91da42912bf5a9204ce9d0a58dba1132fea18a87d3fbebaa3fa47ea8c0cd9f9c_s390x, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:91da42912bf5a9204ce9d0a58dba1132fea18a87d3fbebaa3fa47ea8c0cd9f9c_s390x |
| Red Hat | registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b78d9dc2aac659e141a2292b695881a68b4b235f4fa3e9c62324c356279ac1d2_amd64 as a component of Red Hat OpenShift Service Mesh 3.2 | registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b78d9dc2aac659e141a2292b695881a68b4b235f4fa3e9c62324c356279ac1d2_amd64, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b78d9dc2aac659e141a2292b695881a68b4b235f4fa3e9c62324c356279ac1d2_amd64, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b78d9dc2aac659e141a2292b695881a68b4b235f4fa3e9c62324c356279ac1d2_amd64 |
| Red Hat | registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:cec4478a89c2efb253fe0e60553603479cf36378d00169314945f103c72353ce_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2 | *, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:cec4478a89c2efb253fe0e60553603479cf36378d00169314945f103c72353ce_ppc64le, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:cec4478a89c2efb253fe0e60553603479cf36378d00169314945f103c72353ce_ppc64le |
| Red Hat | registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:504818071f52813cb01d13626c96af14b88f2e235314a2450aa4f604063af1de_arm64 as a component of Red Hat OpenShift Service Mesh 3.2 | registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:504818071f52813cb01d13626c96af14b88f2e235314a2450aa4f604063af1de_arm64, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:504818071f52813cb01d13626c96af14b88f2e235314a2450aa4f604063af1de_arm64, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:504818071f52813cb01d13626c96af14b88f2e235314a2450aa4f604063af1de_arm64 |
| Red Hat | registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:67d8d5569b344c272578b4f845122d661881d0d6cacebd5f194f986060b9e10d_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2 | registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:67d8d5569b344c272578b4f845122d661881d0d6cacebd5f194f986060b9e10d_ppc64le, registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:67d8d5569b344c272578b4f845122d661881d0d6cacebd5f194f986060b9e10d_ppc64le, registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:67d8d5569b344c272578b4f845122d661881d0d6cacebd5f194f986060b9e10d_ppc64le |
| Red Hat | registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9900c0da489c01a2e04e5c5150354dbee9b3bb46ef7b0f0072f65089997093b8_arm64 as a component of Red Hat OpenShift Service Mesh 3.2 | *, *, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:9900c0da489c01a2e04e5c5150354dbee9b3bb46ef7b0f0072f65089997093b8_arm64 |
| Red Hat | registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:bc14a5012369af82b5ff8c2d9364c3ffd741a289b8431558ff7a86e022bcac6e_ppc64le as a component of Red Hat OpenShift Service Mesh 3.2 | registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:bc14a5012369af82b5ff8c2d9364c3ffd741a289b8431558ff7a86e022bcac6e_ppc64le, registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:bc14a5012369af82b5ff8c2d9364c3ffd741a289b8431558ff7a86e022bcac6e_ppc64le, * |
| Red Hat | registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:594243da2b5a4da139682f4868a7c7fd0fa56c698e54832fec05d46a72ff4dd7_arm64 as a component of Red Hat OpenShift Service Mesh 3.2 | registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:594243da2b5a4da139682f4868a7c7fd0fa56c698e54832fec05d46a72ff4dd7_arm64, *, registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:594243da2b5a4da139682f4868a7c7fd0fa56c698e54832fec05d46a72ff4dd7_arm64 |
| Red Hat | registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:9138b8828fad8bf9d335e7934f8a75fa4346d94b303ad38d67f6fed537e5f599_arm64 as a component of Red Hat OpenShift Service Mesh 3.2 | registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:9138b8828fad8bf9d335e7934f8a75fa4346d94b303ad38d67f6fed537e5f599_arm64, registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:9138b8828fad8bf9d335e7934f8a75fa4346d94b303ad38d67f6fed537e5f599_arm64, registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:9138b8828fad8bf9d335e7934f8a75fa4346d94b303ad38d67f6fed537e5f599_arm64 |
| Red Hat | registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:3e44d9439468e5420742a3082b1f8b00053a02687c24bb8297825da08e92b042_s390x as a component of Red Hat OpenShift Service Mesh 3.2 | registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:3e44d9439468e5420742a3082b1f8b00053a02687c24bb8297825da08e92b042_s390x, *, registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:3e44d9439468e5420742a3082b1f8b00053a02687c24bb8297825da08e92b042_s390x |
| Red Hat | registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:9138b8828fad8bf9d335e7934f8a75fa4346d94b303ad38d67f6fed537e5f599_arm64 as a component of Red Hat OpenShift Service Mesh 3.2 | *, *, * |
| Red Hat | registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:ef738fd2162041bdaff38185f08a6860e760eabff83644c89aa14db85a972043_amd64 as a component of Red Hat OpenShift Service Mesh 3.2 | registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:ef738fd2162041bdaff38185f08a6860e760eabff83644c89aa14db85a972043_amd64, registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:ef738fd2162041bdaff38185f08a6860e760eabff83644c89aa14db85a972043_amd64, registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:ef738fd2162041bdaff38185f08a6860e760eabff83644c89aa14db85a972043_amd64 |
| Red Hat | registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4f2baa3751d04f80647c3d2b51f3e1a9530c14dd0242c85dabddaedf7caacd1b_s390x as a component of Red Hat OpenShift Service Mesh 3.2 | registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:4f2baa3751d04f80647c3d2b51f3e1a9530c14dd0242c85dabddaedf7caacd1b_s390x, *, * |
| Red Hat | registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:12ae8a08ed1d038881ab558bd620b7ca626e9888ec2e2da12abc0a986d3aafd3_amd64 as a component of Red Hat OpenShift Service Mesh 3.2 | *, registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:12ae8a08ed1d038881ab558bd620b7ca626e9888ec2e2da12abc0a986d3aafd3_amd64, registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:12ae8a08ed1d038881ab558bd620b7ca626e9888ec2e2da12abc0a986d3aafd3_amd64 |
| Red Hat | registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b78d9dc2aac659e141a2292b695881a68b4b235f4fa3e9c62324c356279ac1d2_amd64 as a component of Red Hat OpenShift Service Mesh 3.2 | *, registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:b78d9dc2aac659e141a2292b695881a68b4b235f4fa3e9c62324c356279ac1d2_amd64, * |
| Red Hat | registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c18d2ab6637b0b21aca15cd77cb2b7120550825c152f3208923283f5e468920f_arm64 as a component of Red Hat OpenShift Service Mesh 3.2 | *, *, * |
| Red Hat | registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:58f26a2a054371675eb72fd922e43ec8cd5e4dfa0dff638cdb5d8c257c5541c3_amd64 as a component of Red Hat OpenShift Service Mesh 3.2 | *, registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:58f26a2a054371675eb72fd922e43ec8cd5e4dfa0dff638cdb5d8c257c5541c3_amd64, registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:58f26a2a054371675eb72fd922e43ec8cd5e4dfa0dff638cdb5d8c257c5541c3_amd64 |
…and 34 more
Timeline
- Feb 23, 2026 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Jul 8, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2026:3111 advisory
- https://access.redhat.com/security/cve/CVE-2025-61729 advisory
- https://access.redhat.com/security/updates/classification advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3111.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2418462 issue
- https://www.cve.org/CVERecord?id=CVE-2025-61729 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-61729 advisory
- https://go.dev/cl/725920 advisory
- https://go.dev/issue/76445 advisory
- https://groups.google.com/g/golang-announce/c/8FJoBkPddm4 advisory
- https://pkg.go.dev/vuln/GO-2025-4155 advisory