CVE-2025-61724: Excessive CPU consumption in Reader.ReadResponse in net/textproto

Published Oct 29, 2025
·
Updated

Excessive CPU consumption in Reader.ReadResponse in net/textproto

Other sources

The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this can cause excessive CPU consumption.

NVD

Affected Software

17 affected components
Microsoft azl3 golang 1.25.3-1
Microsoft azl3 golang 1.23.12-1
Microsoft cbl2 golang 1.18.8-10
Microsoft cbl2 gcc 11.2.0-8
Microsoft azl3 gcc 13.2.0-7
Microsoft cbl2 tensorflow 2.11.1-2
Microsoft azl3 tensorflow 2.16.1-9
Microsoft azl3 python-tensorboard 2.16.2-6
Microsoft cbl2 golang 1.22.7-5
Microsoft cbl2 python-tensorboard 2.11.0-3
Microsoft cbl2 msft-golang 1.24.8-1
Microsoft cbl2 msft-golang 1.24.9-1
Microsoft cbl2 msft-golang 1.24.11-1
Microsoft azl3 golang 1.25.5-1
Golang Go<1.24.8
Golang Go>=1.25.0<1.25.2
IBM API Connect V12 OnPrem<=All

Remediation

Event History

Oct 29, 2025
CVE Published
via MITRE·10:10 PM
Data Sourced
via MITRE·10:10 PM
DescriptionWeakness
Data Sourced
via NVD·11:16 PM
RemedyDescriptionSeverityWeaknessAffected Software
Oct 31, 2025
Data Sourced
via Microsoft·01:07 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·01:07 AM
Affected Software
Updated
via Microsoft·01:07 AM
DescriptionSeverity
Updated
via Microsoft·01:07 AM
SeverityAffected Software
Jul 7, 2026
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2025-61724?

CVE-2025-61724 is considered a moderate severity vulnerability due to its potential for excessive CPU consumption.

2

How do I fix CVE-2025-61724?

To fix CVE-2025-61724, update to the latest versions of the affected software packages where this issue has been addressed.

3

What causes CVE-2025-61724?

CVE-2025-61724 is caused by excessive CPU consumption due to the inefficient string concatenation in the Reader.ReadResponse function.

4

Which software is affected by CVE-2025-61724?

CVE-2025-61724 affects multiple Microsoft products including azl3 golang, cbl2 golang, and others listed in the vulnerability report.

5

What are the implications of CVE-2025-61724?

The implications of CVE-2025-61724 include potential denial of service due to excessive CPU resource consumption, affecting system performance.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203