Bug 2335901 (CVE-2025-21614) - CVE-2025-21614 go-git: go-git clients vulnerable to DoS via maliciously crafted Git server replies
Summary: CVE-2025-21614 go-git: go-git clients vulnerable to DoS via maliciously craft...
Keywords:
Status: NEW
Alias: CVE-2025-21614
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2335995 2336014 2336015 2336016 2336017 2336018 2336019 2336020
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-01-06 17:02 UTC by OSIDB Bzimport
Modified: 2025-05-06 08:28 UTC (History)
91 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2025:0407 0 None None None 2025-01-20 08:02:33 UTC
Red Hat Product Errata RHSA-2024:6122 0 None None None 2025-02-25 04:38:25 UTC
Red Hat Product Errata RHSA-2025:0401 0 None None None 2025-01-20 01:34:15 UTC
Red Hat Product Errata RHSA-2025:0654 0 None None None 2025-01-28 04:28:59 UTC
Red Hat Product Errata RHSA-2025:0662 0 None None None 2025-01-23 09:30:10 UTC
Red Hat Product Errata RHSA-2025:0907 0 None None None 2025-02-03 22:41:02 UTC
Red Hat Product Errata RHSA-2025:1119 0 None None None 2025-02-11 10:54:08 UTC
Red Hat Product Errata RHSA-2025:1334 0 None None None 2025-02-11 21:22:32 UTC
Red Hat Product Errata RHSA-2025:1468 0 None None None 2025-02-13 18:14:51 UTC
Red Hat Product Errata RHSA-2025:1704 0 None None None 2025-02-27 00:33:21 UTC
Red Hat Product Errata RHSA-2025:1869 0 None None None 2025-02-26 13:39:46 UTC
Red Hat Product Errata RHSA-2025:1870 0 None None None 2025-02-26 13:48:00 UTC
Red Hat Product Errata RHSA-2025:1888 0 None None None 2025-02-26 19:14:14 UTC
Red Hat Product Errata RHSA-2025:3069 0 None None None 2025-03-20 08:38:32 UTC

Description OSIDB Bzimport 2025-01-06 17:02:01 UTC 
go-git is a highly extensible git implementation library written in pure Go. A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.13. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients. Users running versions of go-git from v4 and above are recommended to upgrade to v5.13 in order to mitigate this vulnerability.
Comment 2 errata-xmlrpc 2025-01-20 01:34:10 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2025:0401 https://access.redhat.com/errata/RHSA-2025:0401
Comment 3 errata-xmlrpc 2025-01-23 09:30:05 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2025:0662 https://access.redhat.com/errata/RHSA-2025:0662
Comment 4 errata-xmlrpc 2025-01-28 04:28:54 UTC 
This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.17

Via RHSA-2025:0654 https://access.redhat.com/errata/RHSA-2025:0654
Comment 6 errata-xmlrpc 2025-02-03 22:40:57 UTC 
This issue has been addressed in the following products:

  Red Hat Advanced Cluster Security 4.6

Via RHSA-2025:0907 https://access.redhat.com/errata/RHSA-2025:0907
Comment 7 errata-xmlrpc 2025-02-11 10:54:03 UTC 
This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.17

Via RHSA-2025:1119 https://access.redhat.com/errata/RHSA-2025:1119
Comment 8 errata-xmlrpc 2025-02-11 21:22:27 UTC 
This issue has been addressed in the following products:

  Red Hat Advanced Cluster Security 4.5

Via RHSA-2025:1334 https://access.redhat.com/errata/RHSA-2025:1334
Comment 9 errata-xmlrpc 2025-02-13 18:14:46 UTC 
This issue has been addressed in the following products:

  Red Hat Advanced Cluster Security 4.4

Via RHSA-2025:1468 https://access.redhat.com/errata/RHSA-2025:1468
Comment 10 errata-xmlrpc 2025-02-25 04:38:19 UTC 
This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.18

Via RHSA-2024:6122 https://access.redhat.com/errata/RHSA-2024:6122
Comment 11 errata-xmlrpc 2025-02-26 13:39:41 UTC 
This issue has been addressed in the following products:

  Red Hat OpenStack Platform 16.2

Via RHSA-2025:1869 https://access.redhat.com/errata/RHSA-2025:1869
Comment 12 errata-xmlrpc 2025-02-26 13:47:55 UTC 
This issue has been addressed in the following products:

  Red Hat OpenStack Platform 17.1 for RHEL 9

Via RHSA-2025:1870 https://access.redhat.com/errata/RHSA-2025:1870
Comment 13 errata-xmlrpc 2025-02-26 19:14:10 UTC 
This issue has been addressed in the following products:

  Red Hat OpenShift GitOps 1.15

Via RHSA-2025:1888 https://access.redhat.com/errata/RHSA-2025:1888
Comment 14 errata-xmlrpc 2025-02-27 00:33:16 UTC 
This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.16

Via RHSA-2025:1704 https://access.redhat.com/errata/RHSA-2025:1704
Comment 16 errata-xmlrpc 2025-03-20 08:38:27 UTC 
This issue has been addressed in the following products:

  Red Hat OpenShift GitOps 1.14

Via RHSA-2025:3069 https://access.redhat.com/errata/RHSA-2025:3069
Note You need to log in before you can comment on or make changes to this bug.