CVE-2025-61730: medium-severity vulnerability in Go standard library crypto/tls
Handshake messages may be processed at the incorrect encryption level in crypto/tls
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3epss 0.3%
During the TLS 1.3 handshake if multiple messages are sent in records that span encryption level boundaries (for instance the Client Hello and Encrypted Extensions messages), the subsequent messages may be processed before the encryption level changes. This can cause some minor information disclosure if a network-local attacker can inject messages during the handshake.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
Go standard library · crypto/tlsRelated CVEs — Go standard library crypto/tls
In the same product, most dangerous first.
CVE-2023-29409—Large RSA keys can cause high CPU usage in crypto/tlsEPSS 1.6%CVE-2023-39322—Memory exhaustion in QUIC connection handling in crypto/tlsEPSS 1.3%CVE-2023-39321—Panic when processing post-handshake message on QUIC connections in crypto/tlsEPSS 1.3%CVE-2023-45287—Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channelEPSS 1.3%CVE-2022-30629LOWSession tickets lack random ticket_age_add in crypto/tlsEPSS 1.2%CVE-2022-41724—Panic on large handshake records in crypto/tlsEPSS 1.1%