The ParseAddressList function incorrectly handles comments (text within parentheses) within display names. Since this is a misalignment with conforming address parsers, it can result in different trust decisions being made by programs using different parsers.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade slirp4netnsUpgrade golang-miscUpgrade podman-testsUpgrade udicaUpgrade criuUpgrade critUpgrade cockpit-podmanUpgrade toolbox-testsUpgrade python3-criuUpgrade fuse-overlayfsUpgrade go-toolsetUpgrade libslirpUpgrade golang-srcUpgrade runcUpgrade buildahUpgrade podman-catatonitUpgrade podman-dockerUpgrade aardvark-dnsUpgrade golangUpgrade netavarkUpgrade buildah-testsUpgrade podman-gvproxyUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade skopeo-testsUpgrade podman-pluginsUpgrade conmonUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade golang-testsUpgrade podmanUpgrade criu-libsUpgrade skopeoUpgrade crunUpgrade golang-binUpgrade toolboxUpgrade containers-commonUpgrade python3-podmanUpgrade golang-docsUpgrade delveUpgrade container-selinuxUpgrade criu-devel | May 8, 2024 | Mar 5, 2024 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Mar 5, 2024 |
| Amazon Linux Ami 2 | — | Upgrade golang-sharedUpgrade golang-binUpgrade golang-docsUpgrade golang-miscUpgrade golang-testsUpgrade golangUpgrade golang-src | May 31, 2024 | Mar 5, 2024 |
| Amazon_linux_2023 | — | Upgrade golang-sharedUpgrade golang-docsUpgrade golang-testsUpgrade golang-binUpgrade golangUpgrade golang-srcUpgrade golang-misc | Feb 17, 2025 | Mar 5, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Mar 5, 2024 |
| Freebsd | — | Upgrade go122Upgrade go121Upgrade oauth2-proxy | Oct 18, 2024 | Oct 18, 2024 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Jul 16, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jun 26, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Oct 8, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jul 17, 2024 | Mar 5, 2024 |
| Oracle_linux | — | Upgrade aardvark-dnsUpgrade buildah-testsUpgrade runcUpgrade libslirpUpgrade container-selinuxUpgrade cockpit-podmanUpgrade golang-miscUpgrade udicaUpgrade golang-docsUpgrade buildahUpgrade podman-dockerUpgrade go-toolsetUpgrade podman-gvproxyUpgrade podman-remoteUpgrade python3-criuUpgrade golang-srcUpgrade slirp4netnsUpgrade critUpgrade golangUpgrade podman-pluginsUpgrade criuUpgrade skopeo-testsUpgrade skopeoUpgrade fuse-overlayfsUpgrade libslirp-develUpgrade golang-testsUpgrade conmonUpgrade netavarkUpgrade containernetworking-pluginsUpgrade golang-binUpgrade python3-podmanUpgrade containers-commonUpgrade criu-develUpgrade podman-catatonitUpgrade delveUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade crunUpgrade podman-testsUpgrade podman | May 8, 2024 | Mar 5, 2024 |
| Redhat Openshift | — | Upgrade openshiftUpgrade ose-gcp-gcr-image-credential-providerUpgrade ose-azure-acr-image-credential-providerUpgrade podmanUpgrade ose-aws-ecr-image-credential-provider | Jun 28, 2024 | Mar 5, 2024 |
| Redhat_linux | — | Upgrade podman-catatonit-debuginfoUpgrade slirp4netns-debuginfoUpgrade udicaUpgrade toolbox-debugsourceUpgrade podmanUpgrade podman-gvproxyUpgrade golang-docsUpgrade slirp4netnsUpgrade skopeo-testsUpgrade containernetworking-plugins-debugsourceUpgrade podman-dockerUpgrade podman-testsUpgrade golang-binUpgrade podman-pluginsUpgrade criu-libs-debuginfoUpgrade delveUpgrade podman-plugins-debuginfoUpgrade crunUpgrade toolbox-debuginfoUpgrade python3-criuUpgrade libslirp-develUpgrade delve-debugsourceUpgrade podman-remote-debuginfoUpgrade runc-debuginfoUpgrade runcUpgrade container-selinuxUpgrade podman-gvproxy-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-debugsourceUpgrade libslirpUpgrade libslirp-debuginfoUpgrade skopeoUpgrade containernetworking-plugins-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade critUpgrade toolboxUpgrade criu-develUpgrade buildah-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade slirp4netns-debugsourceUpgrade podman-debugsourceUpgrade conmonUpgrade criu-debuginfoUpgrade podman-remoteUpgrade buildah-debuginfoNo solution existsUpgrade golangUpgrade podman-debuginfoUpgrade aardvark-dnsUpgrade podman-catatonitUpgrade netavarkUpgrade containers-commonUpgrade crun-debugsourceUpgrade toolbox-testsUpgrade cockpit-podmanUpgrade golang-srcUpgrade python3-podmanUpgrade oci-seccomp-bpf-hookUpgrade go-toolsetUpgrade buildahUpgrade criuUpgrade crun-debuginfoUpgrade conmon-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfsUpgrade golang-miscUpgrade criu-libsUpgrade buildah-tests-debuginfoUpgrade containernetworking-pluginsUpgrade delve-debuginfoUpgrade golang-testsUpgrade conmon-debuginfoUpgrade buildah-testsUpgrade criu-debugsourceUpgrade runc-debugsource | May 1, 2024 | Mar 5, 2024 |
| Rocky_linux | — | Upgrade slirp4netns-debuginfoUpgrade toolboxUpgrade conmonUpgrade containernetworking-plugins-debuginfoUpgrade crunUpgrade podman-catatonit-debuginfoUpgrade podman-remote-debuginfoUpgrade runcUpgrade libslirp-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade slirp4netns-debugsourceUpgrade skopeo-testsUpgrade criu-develUpgrade libslirpUpgrade delve-debugsourceUpgrade runc-debuginfoUpgrade criu-libsUpgrade fuse-overlayfs-debuginfoUpgrade podman-debugsourceUpgrade toolbox-debugsourceUpgrade toolbox-debuginfoUpgrade podmanUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-testsUpgrade critUpgrade skopeoUpgrade oci-seccomp-bpf-hookUpgrade criu-libs-debuginfoUpgrade delveUpgrade podman-gvproxy-debuginfoUpgrade podman-pluginsUpgrade buildah-debugsourceUpgrade libslirp-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade aardvark-dnsUpgrade go-toolsetUpgrade criu-debugsourceUpgrade buildah-testsUpgrade toolbox-testsUpgrade slirp4netnsUpgrade criuUpgrade conmon-debugsourceUpgrade delve-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade conmon-debuginfoUpgrade buildah-tests-debuginfoUpgrade netavarkUpgrade golang-binUpgrade fuse-overlayfsUpgrade buildahUpgrade containers-commonUpgrade podman-plugins-debuginfoUpgrade crun-debugsourceUpgrade podman-gvproxyUpgrade podman-debuginfoUpgrade containernetworking-pluginsUpgrade libslirp-debuginfoUpgrade podman-catatonitUpgrade buildah-debuginfoUpgrade crun-debuginfoUpgrade runc-debugsourceUpgrade podman-remoteUpgrade golangUpgrade python3-criuUpgrade criu-debuginfo | May 13, 2024 | Mar 5, 2024 |
| Suse | — | Upgrade go1.21-raceUpgrade go1.22-opensslUpgrade go1.21-opensslUpgrade go1.21-openssl-docUpgrade go1.21-openssl-raceUpgrade go1.21-docUpgrade go1.21Upgrade go1.22-raceUpgrade go1.22-openssl-docUpgrade go1.22-openssl-raceUpgrade go1.22Upgrade go1.22-doc | Mar 8, 2024 | Mar 5, 2024 |
| Ubuntu | — | Upgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.17-goUpgrade golang-1.22Upgrade golang-1.18-srcUpgrade golang-1.21Upgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.17-srcUpgrade golang-1.22-goUpgrade golang-1.17Upgrade golang-1.18Upgrade golang-1.22-srcUpgrade golang-1.21-srcUpgrade golang-1.21-go | Jul 10, 2024 | Mar 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub