cbcvebase.
CVE-2025-58188
published 2025-10-29

CVE-2025-58188: Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method…

PriorityP340high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.36%
28.0th percentile
Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method. This affects programs which validate arbitrary certificate chains.

Affected

32 ranges· showing 25
VendorProductVersion rangeFixed in
debiangolang-1.15< golang-1.24 1.24.8-1 (forky)golang-1.24 1.24.8-1 (forky)
debiangolang-1.19< golang-1.24 1.24.8-1 (forky)golang-1.24 1.24.8-1 (forky)
debiangolang-1.24< golang-1.24 1.24.8-1 (forky)golang-1.24 1.24.8-1 (forky)
debiangolang-1.25< golang-1.24 1.24.8-1 (forky)golang-1.24 1.24.8-1 (forky)
github.comopen-feature_flagd_core>= 0 < 0.13.10.13.1
github.comopen-feature_flagd_flagd>= 0 < 0.13.10.13.1
github.comopen-feature_flagd_flagd-proxy>= 0 < 0.8.20.8.2
github.comopentofu_opentofu>= 0 < 1.10.71.10.7
go_standard_librarycrypto_x509< 1.24.81.24.8
go_standard_librarycrypto_x509>= 1.25.0 < 1.25.21.25.2
golanggo< 1.24.81.24.8
golanggo>= 1.25.0 < 1.25.21.25.2
msrcazl3_gcc_13.2.0-7
msrcazl3_golang_1.23.12-1
msrcazl3_golang_1.25.3-1
msrcazl3_golang_1.25.5-1
msrcazl3_golang_1.25.6-1
msrcazl3_golang_1.25.7-1
msrcazl3_golang_1.25.8-1
msrcazl3_golang_1.26.0-1
msrcazl3_python-tensorboard_2.16.2-6
msrcazl3_tensorflow_2.16.1-9
msrccbl2_gcc_11.2.0-8
msrccbl2_golang_1.18.8-10
msrccbl2_golang_1.22.7-5

CVSS provenance

nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
ghsa7.0HIGH
osv7.5HIGH
vendor_debian7.5HIGH
vendor_msrc7.5HIGH
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.