CVE-2025-4673 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	6.8 MEDIUM	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Go	CNA	---				---
CISA-ADP	ADP	6.8 MEDIUM	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 12%

Debian Releases

Debian Product

Codename

golang-1.15

bullseye	vulnerable
bookworm	no-dsa

golang-1.19

bookworm	vulnerable
bullseye	postponed

golang-1.23

sid	1.23.10-1 fixed
bookworm	no-dsa
bullseye	postponed

golang-1.24

trixie	1.24.4-1 fixed
sid	1.24.4-1 fixed
bookworm	no-dsa
bullseye	postponed

Ubuntu Releases

Ubuntu Product

Codename

golang

plucky	dne
oracular	dne
noble	dne
jammy	dne

golang-1.6

plucky	dne
oracular	dne
noble	dne
jammy	dne
xenial	needs-triage

golang-1.8

plucky	dne
oracular	dne
noble	dne
jammy	dne
bionic	needs-triage

golang-1.9

plucky	dne
oracular	dne
noble	dne
jammy	dne
bionic	needs-triage

golang-1.10

plucky	dne
oracular	dne
noble	dne
jammy	dne
bionic	needs-triage
xenial	needs-triage
trusty	needs-triage

golang-1.13

plucky	dne
oracular	dne
noble	dne
jammy	needs-triage
focal	needs-triage
bionic	needs-triage
xenial	needs-triage

golang-1.14

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	needs-triage

golang-1.16

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	needs-triage
bionic	needs-triage

golang-1.17

plucky	dne
oracular	dne
noble	dne
jammy	needs-triage

golang-1.18

plucky	dne
oracular	dne
noble	dne
jammy	needs-triage
bionic	needs-triage
xenial	needs-triage

golang-1.20

plucky	dne
oracular	dne
noble	dne
jammy	needs-triage

golang-1.21

plucky	dne
oracular	dne
noble	needs-triage
jammy	needs-triage

golang-1.22

plucky	dne
oracular	Fixed 1.22.8-1ubuntu0.1 released
noble	Fixed 1.22.2-2ubuntu0.4 released
jammy	Fixed 1.22.2-2~22.04.3 released

golang-1.23

plucky	needs-triage
oracular	ignored
noble	needs-triage
jammy	needs-triage

golang-1.24

plucky	needs-triage
oracular	dne
noble	dne
jammy	dne

Vulnerability Media Exposure

[GERMAN] Golang Go: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder weitere nicht spezifizierte Auswirkungen zu erziehlen.
Published: 2025-06-01T22:00:00+00:00

References

https://go.dev/cl/679257

https://go.dev/issue/73816

https://groups.google.com/g/golang-announce/c/ufZ8WpEsA3A

https://pkg.go.dev/vuln/GO-2025-3751