The ParseAddressList function incorrectly handles comments (text within parentheses) within display names. Since this is a misalignment with conforming address parsers, it can result in different trust decisions being made by programs using different parsers.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade runcUpgrade python3-criuUpgrade buildahUpgrade toolbox-testsUpgrade podman-dockerUpgrade golang-miscUpgrade golangUpgrade buildah-testsUpgrade netavarkUpgrade fuse-overlayfsUpgrade slirp4netnsUpgrade go-toolsetUpgrade golang-srcUpgrade aardvark-dnsUpgrade podman-testsUpgrade libslirpUpgrade criuUpgrade udicaUpgrade critUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade cockpit-podmanUpgrade podman-remoteUpgrade criu-develUpgrade containers-commonUpgrade container-selinuxUpgrade delveUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade libslirp-develUpgrade crunUpgrade oci-seccomp-bpf-hookUpgrade python3-podmanUpgrade conmonUpgrade golang-binUpgrade podmanUpgrade skopeo-testsUpgrade toolboxUpgrade podman-pluginsUpgrade golang-testsUpgrade skopeoUpgrade golang-docs | May 8, 2024 | Mar 5, 2024 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Mar 5, 2024 |
| Amazon Linux Ami 2 | — | Upgrade golang-sharedUpgrade golang-docsUpgrade golang-binUpgrade golangUpgrade golang-miscUpgrade golang-testsUpgrade golang-src | May 31, 2024 | Mar 5, 2024 |
| Amazon_linux_2023 | — | Upgrade golang-docsUpgrade golang-sharedUpgrade golang-testsUpgrade golang-binUpgrade golang-srcUpgrade golangUpgrade golang-misc | Feb 17, 2025 | Mar 5, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Mar 5, 2024 |
| Freebsd | — | Upgrade oauth2-proxyUpgrade go121Upgrade go122 | Oct 18, 2024 | Oct 18, 2024 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jul 16, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Jun 26, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Oct 8, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jul 17, 2024 | Mar 5, 2024 |
| Oracle_linux | — | Upgrade conmonUpgrade podman-pluginsUpgrade skopeoUpgrade skopeo-testsUpgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade libslirp-develUpgrade criuUpgrade delveUpgrade python3-podmanUpgrade criu-libsUpgrade golang-binUpgrade podman-catatonitUpgrade podman-testsUpgrade crunUpgrade golang-testsUpgrade containers-commonUpgrade criu-develUpgrade oci-seccomp-bpf-hookUpgrade netavarkUpgrade podmanUpgrade podman-gvproxyUpgrade podman-remoteUpgrade libslirpUpgrade python3-criuUpgrade golang-docsUpgrade podman-dockerUpgrade cockpit-podmanUpgrade runcUpgrade golangUpgrade buildah-testsUpgrade golang-srcUpgrade aardvark-dnsUpgrade critUpgrade udicaUpgrade go-toolsetUpgrade buildahUpgrade slirp4netnsUpgrade golang-miscUpgrade container-selinux | May 8, 2024 | Mar 5, 2024 |
| Redhat Openshift | — | Upgrade ose-aws-ecr-image-credential-providerUpgrade openshiftUpgrade podmanUpgrade ose-gcp-gcr-image-credential-providerUpgrade ose-azure-acr-image-credential-provider | Jun 28, 2024 | Mar 5, 2024 |
| Redhat_linux | — | Upgrade crun-debuginfoUpgrade containers-commonUpgrade crun-debugsourceUpgrade golangUpgrade aardvark-dnsUpgrade netavarkUpgrade buildah-debuginfoUpgrade conmon-debugsourceUpgrade buildah-tests-debuginfoUpgrade runc-debugsourceUpgrade criuUpgrade podman-catatonitUpgrade delve-debuginfoNo solution existsUpgrade criu-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-pluginsUpgrade toolbox-testsUpgrade buildah-testsUpgrade criu-debuginfoUpgrade conmon-debuginfoUpgrade podman-remoteUpgrade fuse-overlayfsUpgrade criu-libsUpgrade python3-podmanUpgrade golang-miscUpgrade golang-testsUpgrade go-toolsetUpgrade cockpit-podmanUpgrade podman-debuginfoUpgrade golang-srcUpgrade buildahUpgrade oci-seccomp-bpf-hookUpgrade libslirp-debugsourceUpgrade libslirp-debuginfoUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolbox-debugsourceUpgrade podman-dockerUpgrade libslirpUpgrade podmanUpgrade containernetworking-plugins-debuginfoUpgrade delve-debugsourceUpgrade libslirp-develUpgrade golang-docsUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade podman-testsUpgrade golang-binUpgrade fuse-overlayfs-debuginfoUpgrade critUpgrade podman-pluginsUpgrade podman-plugins-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade toolbox-debuginfoUpgrade delveUpgrade crunUpgrade container-selinuxUpgrade udicaUpgrade toolboxUpgrade python3-criuUpgrade skopeoUpgrade containernetworking-plugins-debugsourceUpgrade conmonUpgrade runcUpgrade criu-develUpgrade buildah-debugsourceUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runc-debuginfoUpgrade criu-libs-debuginfoUpgrade podman-remote-debuginfoUpgrade skopeo-testsUpgrade podman-catatonit-debuginfo | May 1, 2024 | Mar 5, 2024 |
| Rocky_linux | — | Upgrade crun-debugsourceUpgrade podman-plugins-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade containers-commonUpgrade podman-catatonitUpgrade python3-criuUpgrade buildahUpgrade buildah-tests-debuginfoUpgrade conmon-debuginfoUpgrade golangUpgrade buildah-debuginfoUpgrade containernetworking-pluginsUpgrade libslirp-debuginfoUpgrade netavarkUpgrade fuse-overlayfsUpgrade podman-remoteUpgrade runc-debugsourceUpgrade toolbox-testsUpgrade crun-debuginfoUpgrade criu-debuginfoUpgrade podman-debuginfoUpgrade golang-binUpgrade go-toolsetUpgrade slirp4netnsUpgrade delve-debuginfoUpgrade aardvark-dnsUpgrade conmon-debugsourceUpgrade criuUpgrade podman-gvproxyUpgrade criu-debugsourceUpgrade buildah-testsUpgrade libslirp-debugsourceUpgrade conmonUpgrade containernetworking-plugins-debuginfoUpgrade podman-remote-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hookUpgrade criu-develUpgrade toolbox-debuginfoUpgrade critUpgrade toolbox-debugsourceUpgrade podman-debugsourceUpgrade toolboxUpgrade podman-catatonit-debuginfoUpgrade delve-debugsourceUpgrade criu-libsUpgrade delveUpgrade criu-libs-debuginfoUpgrade runc-debuginfoUpgrade skopeoUpgrade podman-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podmanUpgrade libslirpUpgrade containernetworking-plugins-debugsourceUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-develUpgrade crunUpgrade buildah-debugsourceUpgrade slirp4netns-debuginfoUpgrade slirp4netns-debugsourceUpgrade runc | May 13, 2024 | Mar 5, 2024 |
| Suse | — | Upgrade go1.22-openssl-docUpgrade go1.22-docUpgrade go1.22-raceUpgrade go1.21-docUpgrade go1.21Upgrade go1.22-openssl-raceUpgrade go1.22Upgrade go1.21-raceUpgrade go1.21-openssl-raceUpgrade go1.22-opensslUpgrade go1.21-openssl-docUpgrade go1.21-openssl | Mar 8, 2024 | Mar 5, 2024 |
| Ubuntu | — | Upgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.17-srcUpgrade golang-1.17-goUpgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.21Upgrade golang-1.22Upgrade golang-1.18-goUpgrade golang-1.21-srcUpgrade golang-1.18Upgrade golang-1.17Upgrade golang-1.22-srcUpgrade golang-1.22-goUpgrade golang-1.21-go | Jul 10, 2024 | Mar 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub