PT-2025-42736 · Golang+4 · Golang+4

CVE-2025-47912

·

Publicado

2025-01-01

·

Atualizado

2026-08-24

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:N/A:C
Nome do Software Vulnerável e Versões Afetadas versões do golang 1.15 versões do golang 1.19
Descrição O pacote net/url não valida adequadamente nomes de host IPv6 entre colchetes. Isso pode resultar em problemas ao analisar URLs contendo endereços IPv6 entre colchetes.
Recomendações Atualize para uma versão mais recente do golang que contenha uma correção para esta vulnerabilidade.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-1286

Identificadores relacionados

ALT-PU-2025-12749
ALT-PU-2025-13232
AZL-78905
AZL-98817
BDU:2025-14527
BIT-GOLANG-2025-47912
CLEANSTART-2025-EU07511
CLEANSTART-2026-BI19096
CLEANSTART-2026-CL67452
CLEANSTART-2026-DG85765
CLEANSTART-2026-DK89443
CLEANSTART-2026-DX24417
CLEANSTART-2026-EH36582
CLEANSTART-2026-ES72297
CLEANSTART-2026-GK50991
CLEANSTART-2026-HO16255
CLEANSTART-2026-HP74907
CLEANSTART-2026-IC09970
CLEANSTART-2026-JL47330
CLEANSTART-2026-JV11945
CLEANSTART-2026-JW97006
CLEANSTART-2026-JY65496
CLEANSTART-2026-KF61159
CLEANSTART-2026-KK19266
CLEANSTART-2026-KL41807
CLEANSTART-2026-KQ90880
CLEANSTART-2026-LA96053
CLEANSTART-2026-LC57158
CLEANSTART-2026-LD38774
CLEANSTART-2026-LY84798
CLEANSTART-2026-MR40751
CLEANSTART-2026-MW42038
CLEANSTART-2026-NE76010
CLEANSTART-2026-OK95571
CLEANSTART-2026-OO10146
CLEANSTART-2026-PF69993
CLEANSTART-2026-PH30270
CLEANSTART-2026-PX55932
CLEANSTART-2026-QT53274
CLEANSTART-2026-RF77222
CLEANSTART-2026-RT37134
CLEANSTART-2026-RV11606
CLEANSTART-2026-RY70255
CLEANSTART-2026-SA78596
CLEANSTART-2026-SA81922
CLEANSTART-2026-SF49994
CLEANSTART-2026-SO47947
CLEANSTART-2026-ST87963
CLEANSTART-2026-TE81995
CLEANSTART-2026-TF97968
CLEANSTART-2026-UL50886
CLEANSTART-2026-UR38994
CLEANSTART-2026-VN16911
CLEANSTART-2026-VR76068
CLEANSTART-2026-VY69341
CLEANSTART-2026-WE55349
CLEANSTART-2026-WF25734
CLEANSTART-2026-WO16430
CLEANSTART-2026-WP03591
CLEANSTART-2026-WW79343
CLEANSTART-2026-WX54555
CLEANSTART-2026-XI63678
CLEANSTART-2026-XP01012
CLEANSTART-2026-XR35583
CLEANSTART-2026-XS86531
CLEANSTART-2026-XV43582
CLEANSTART-2026-XZ28830
CLEANSTART-2026-YT82900
CLEANSTART-2026-ZL51442
CLEANSTART-2026-ZN46983
CLEANSTART-2026-ZT09801
CLEANSTART-2026-ZU45532
CLEANSTART-2026-ZW09225
CVE-2025-47912
ECHO-EFA8-0654-2E47
GO-2025-4010
MGASA-2025-0256
OESA-2025-2782
OESA-2025-2783
OESA-2025-2826
OESA-2025-2827
OESA-2025-2828
OESA-2025-2868
OPENSUSE-SU-2025:15608-1
OPENSUSE-SU-2025:15609-1
OPENSUSE-SU-2025:15695-1
OPENSUSE-SU-2025:15703-1
OPENSUSE-SU-2025:15723-1
OPENSUSE-SU-2025:20157-1
OPENSUSE-SU-2025:20158-1
OPENSUSE-SU-2026:20301-1
OPENSUSE-SU-2026:20308-1
OPENSUSE-SU-2026:21483-1
RHSA-2026:7291
RHSA-2026:7385
SUSE-SU-2025:03547-1
SUSE-SU-2025:21192-1
SUSE-SU-2025:21193-1
SUSE-SU-2025:3682-1
SUSE-SU-2025_03547-1
SUSE-SU-2025_3682-1
SUSE-SU-2026:0296-1
SUSE-SU-2026:0297-1
SUSE-SU-2026:0298-1
SUSE-SU-2026:0308-1
SUSE-SU-2026:20623-1
SUSE-SU-2026:20629-1

Produtos afetados

Alt Linux
Debian
Red Os
Suse
Golang