Description
The ParseAddress function constructeds domain-literal address components through repeated string concatenation. When parsing large domain-literal components, this can cause excessive CPU consumption.
Problem types
CWE-407: Inefficient Algorithmic Complexity
Product status
Any version before 1.24.8
1.25.0 (semver) before 1.25.2
Credits
Philippe Antoine (Catena cyber)
References
groups.google.com/g/golang-announce/c/4Emdl2iQ_bI
