CVE-2025-58189

When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information (the ALPN protocols sent by the client) which is not escaped.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
GoCNA
---
---
CISA-ADPADP
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVEADP
---
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 4%
Debian logo
Debian Releases
Debian Product
Codename
golang-1.15
bullseye
vulnerable
trixie
no-dsa
bookworm
no-dsa
golang-1.19
bookworm
vulnerable
trixie
no-dsa
bullseye
postponed
golang-1.24
trixie
no-dsa
bookworm
no-dsa
bullseye
postponed
forky
1.24.9-1
fixed
sid
1.24.9-1
fixed
golang-1.25
forky
1.25.3-1
fixed
sid
1.25.3-1
fixed
trixie
no-dsa
bookworm
no-dsa
bullseye
postponed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
golang
questing
dne
plucky
dne
noble
dne
jammy
dne
golang-1.6
questing
dne
plucky
dne
noble
dne
jammy
dne
xenial
needs-triage
golang-1.8
questing
dne
plucky
dne
noble
dne
jammy
dne
bionic
needs-triage
golang-1.9
questing
dne
plucky
dne
noble
dne
jammy
dne
bionic
needs-triage
golang-1.10
questing
dne
plucky
dne
noble
dne
jammy
dne
bionic
needs-triage
xenial
needs-triage
trusty
needs-triage
golang-1.13
questing
dne
plucky
dne
noble
dne
jammy
needs-triage
focal
needs-triage
bionic
needs-triage
xenial
needs-triage
golang-1.14
questing
dne
plucky
dne
noble
dne
jammy
dne
focal
needs-triage
golang-1.16
questing
dne
plucky
dne
noble
dne
jammy
dne
focal
needs-triage
bionic
needs-triage
golang-1.17
questing
dne
plucky
dne
noble
dne
jammy
needs-triage
golang-1.18
questing
dne
plucky
dne
noble
dne
jammy
needs-triage
focal
needs-triage
bionic
needs-triage
xenial
needs-triage
golang-1.20
questing
dne
plucky
dne
noble
dne
jammy
needs-triage
focal
needs-triage
golang-1.21
questing
dne
plucky
dne
noble
needs-triage
jammy
needs-triage
focal
needs-triage
golang-1.22
questing
dne
plucky
dne
noble
needs-triage
jammy
needs-triage
focal
needs-triage
golang-1.23
questing
needs-triage
plucky
needs-triage
noble
needs-triage
jammy
needs-triage
golang-1.24
questing
needs-triage
plucky
needs-triage
noble
dne
jammy
dne
golang-1.25
questing
needs-triage
plucky
dne
noble
dne
jammy
dne