The ParseAddressList function incorrectly handles comments (text within parentheses) within display names. Since this is a misalignment with conforming address parsers, it can result in different trust decisions being made by programs using different parsers.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-remoteUpgrade container-selinuxUpgrade criu-develUpgrade criu-libsUpgrade golang-testsUpgrade containers-commonUpgrade toolboxUpgrade containernetworking-pluginsUpgrade conmonUpgrade golang-binUpgrade podmanUpgrade libslirp-develUpgrade delveUpgrade python3-podmanUpgrade skopeoUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade crunUpgrade golang-docsUpgrade podman-catatonitUpgrade toolbox-testsUpgrade golangUpgrade cockpit-podmanUpgrade podman-dockerUpgrade slirp4netnsUpgrade libslirpUpgrade podman-testsUpgrade netavarkUpgrade go-toolsetUpgrade runcUpgrade buildahUpgrade critUpgrade udicaUpgrade golang-srcUpgrade aardvark-dnsUpgrade podman-gvproxyUpgrade python3-criuUpgrade criuUpgrade golang-miscUpgrade fuse-overlayfsUpgrade buildah-tests | May 8, 2024 | Mar 5, 2024 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Mar 5, 2024 |
| Amazon Linux Ami 2 | — | Upgrade golang-testsUpgrade golang-srcUpgrade golang-miscUpgrade golangUpgrade golang-sharedUpgrade golang-docsUpgrade golang-bin | May 31, 2024 | Mar 5, 2024 |
| Amazon_linux_2023 | — | Upgrade golangUpgrade golang-srcUpgrade golang-miscUpgrade golang-binUpgrade golang-docsUpgrade golang-sharedUpgrade golang-tests | Feb 17, 2025 | Mar 5, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Mar 5, 2024 |
| Freebsd | — | Upgrade go121Upgrade go122Upgrade oauth2-proxy | Oct 18, 2024 | Oct 18, 2024 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jul 16, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jun 26, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Oct 8, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Jul 17, 2024 | Mar 5, 2024 |
| Oracle_linux | — | Upgrade golang-srcUpgrade runcUpgrade golangUpgrade podman-remoteUpgrade python3-criuUpgrade buildah-testsUpgrade buildahUpgrade libslirpUpgrade cockpit-podmanUpgrade podman-dockerUpgrade udicaUpgrade podman-gvproxyUpgrade critUpgrade container-selinuxUpgrade aardvark-dnsUpgrade golang-miscUpgrade slirp4netnsUpgrade golang-docsUpgrade go-toolsetUpgrade podman-pluginsUpgrade crunUpgrade libslirp-develUpgrade criuUpgrade conmonUpgrade python3-podmanUpgrade golang-binUpgrade criu-libsUpgrade fuse-overlayfsUpgrade podman-catatonitUpgrade containernetworking-pluginsUpgrade skopeo-testsUpgrade skopeoUpgrade podmanUpgrade podman-testsUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade netavarkUpgrade golang-testsUpgrade criu-develUpgrade delve | May 8, 2024 | Mar 5, 2024 |
| Redhat Openshift | — | Upgrade openshiftUpgrade ose-azure-acr-image-credential-providerUpgrade ose-gcp-gcr-image-credential-providerUpgrade podmanUpgrade ose-aws-ecr-image-credential-provider | Jun 28, 2024 | Mar 5, 2024 |
| Redhat_linux | — | Upgrade runc-debuginfoUpgrade toolboxUpgrade criu-libs-debuginfoUpgrade critUpgrade fuse-overlayfs-debuginfoUpgrade skopeoUpgrade podmanUpgrade containernetworking-plugins-debuginfoUpgrade libslirpUpgrade podman-debugsourceUpgrade podman-catatonit-debuginfoUpgrade libslirp-debugsourceUpgrade golang-binUpgrade criu-develUpgrade podman-pluginsUpgrade buildah-debugsourceUpgrade podman-testsUpgrade slirp4netns-debuginfoUpgrade delveUpgrade crunUpgrade toolbox-debuginfoUpgrade podman-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade slirp4netns-debugsourceUpgrade runcUpgrade podman-gvproxy-debuginfoUpgrade container-selinuxUpgrade podman-gvproxyUpgrade udicaUpgrade delve-debugsourceUpgrade slirp4netnsUpgrade skopeo-testsUpgrade python3-criuUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-dockerUpgrade toolbox-debugsourceUpgrade libslirp-develUpgrade libslirp-debuginfoUpgrade golang-docsUpgrade containernetworking-plugins-debugsourceUpgrade podman-remote-debuginfoUpgrade conmonUpgrade crun-debuginfoUpgrade go-toolsetUpgrade cockpit-podmanUpgrade toolbox-testsUpgrade python3-podmanUpgrade oci-seccomp-bpf-hookUpgrade golang-srcUpgrade podman-remoteUpgrade fuse-overlayfs-debugsourceUpgrade criu-libsUpgrade criu-debugsourceUpgrade golang-miscUpgrade golangUpgrade aardvark-dnsUpgrade conmon-debugsourceUpgrade netavarkUpgrade crun-debugsourceUpgrade conmon-debuginfoUpgrade buildah-tests-debuginfoUpgrade buildah-debuginfoUpgrade podman-debuginfoUpgrade buildahUpgrade runc-debugsourceUpgrade buildah-testsUpgrade containers-commonUpgrade criuNo solution existsUpgrade golang-testsUpgrade containernetworking-pluginsUpgrade delve-debuginfoUpgrade fuse-overlayfsUpgrade podman-catatonitUpgrade criu-debuginfo | May 1, 2024 | Mar 5, 2024 |
| Rocky_linux | — | Upgrade buildah-testsUpgrade runc-debugsourceUpgrade conmon-debuginfoUpgrade fuse-overlayfsUpgrade crun-debuginfoUpgrade delve-debuginfoUpgrade slirp4netnsUpgrade golang-binUpgrade podman-debuginfoUpgrade conmon-debugsourceUpgrade go-toolsetUpgrade netavarkUpgrade aardvark-dnsUpgrade criuUpgrade buildah-tests-debuginfoUpgrade criu-debuginfoUpgrade containernetworking-pluginsUpgrade golangUpgrade criu-debugsourceUpgrade podman-plugins-debuginfoUpgrade libslirp-debuginfoUpgrade buildah-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade podman-remoteUpgrade toolbox-testsUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade containers-commonUpgrade python3-criuUpgrade crun-debugsourceUpgrade buildahUpgrade criu-develUpgrade slirp4netns-debuginfoUpgrade libslirp-debugsourceUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-libs-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade toolbox-debuginfoUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hookUpgrade conmonUpgrade toolboxUpgrade fuse-overlayfs-debuginfoUpgrade runcUpgrade podman-remote-debuginfoUpgrade delveUpgrade podmanUpgrade libslirpUpgrade containernetworking-plugins-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade buildah-debugsourceUpgrade libslirp-develUpgrade crunUpgrade podman-debugsourceUpgrade critUpgrade toolbox-debugsourceUpgrade criu-libsUpgrade runc-debuginfoUpgrade delve-debugsourceUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-catatonit-debuginfoUpgrade skopeoUpgrade podman-tests | May 13, 2024 | Mar 5, 2024 |
| Suse | — | Upgrade go1.21-docUpgrade go1.22-openssl-docUpgrade go1.22-docUpgrade go1.22-openssl-raceUpgrade go1.22Upgrade go1.21Upgrade go1.22-raceUpgrade go1.21-openssl-docUpgrade go1.21-raceUpgrade go1.21-opensslUpgrade go1.21-openssl-raceUpgrade go1.22-openssl | Mar 8, 2024 | Mar 5, 2024 |
| Ubuntu | — | Upgrade golang-1.17Upgrade golang-1.21-srcUpgrade golang-1.18Upgrade golang-1.21-goUpgrade golang-1.22-goUpgrade golang-1.22-srcUpgrade golang-1.18-srcUpgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.17-goUpgrade golang-1.21Upgrade golang-1.18-goUpgrade golang-1.17-srcUpgrade golang-1.22Upgrade golang-1.18-go (Ubuntu Pro) | Jul 10, 2024 | Mar 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub