CVE-2025-58187: Quadratic complexity when checking name constraints in crypto/x509
Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains.
Other sources
Quadratic complexity when checking name constraints in crypto/x509
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2.2.0
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58187?
CVE-2025-58187 has a high severity level due to the potential for denial-of-service attacks from certificate validation timeouts.
How do I fix CVE-2025-58187?
To fix CVE-2025-58187, update OpenSSL to the latest version where the vulnerability is patched.
What impact does CVE-2025-58187 have on system performance?
CVE-2025-58187 can cause significant delays in certificate validation, leading to performance degradation in applications that handle large certificate chains.
Is CVE-2025-58187 exploitable remotely?
Yes, CVE-2025-58187 is potentially exploitable remotely if an attacker can induce the application to validate a malicious certificate chain.
Which versions of OpenSSL are affected by CVE-2025-58187?
CVE-2025-58187 affects multiple versions of OpenSSL, specifically those prior to the implementation of the recent fix.