The ParseAddressList function incorrectly handles comments (text within parentheses) within display names. Since this is a misalignment with conforming address parsers, it can result in different trust decisions being made by programs using different parsers.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade oci-seccomp-bpf-hookUpgrade criu-develUpgrade container-selinuxUpgrade skopeo-testsUpgrade containers-commonUpgrade python3-podmanUpgrade crunUpgrade golang-binUpgrade criu-libsUpgrade conmonUpgrade golang-testsUpgrade toolboxUpgrade golang-docsUpgrade containernetworking-pluginsUpgrade delveUpgrade libslirp-develUpgrade podmanUpgrade skopeoUpgrade podman-pluginsUpgrade podman-remoteUpgrade criuUpgrade udicaUpgrade golang-srcUpgrade python3-criuUpgrade podman-catatonitUpgrade aardvark-dnsUpgrade slirp4netnsUpgrade cockpit-podmanUpgrade runcUpgrade buildahUpgrade podman-dockerUpgrade buildah-testsUpgrade podman-gvproxyUpgrade critUpgrade libslirpUpgrade golangUpgrade podman-testsUpgrade go-toolsetUpgrade toolbox-testsUpgrade netavarkUpgrade golang-miscUpgrade fuse-overlayfs | May 8, 2024 | Mar 5, 2024 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Mar 5, 2024 |
| Amazon Linux Ami 2 | — | Upgrade golang-docsUpgrade golang-binUpgrade golang-sharedUpgrade golangUpgrade golang-srcUpgrade golang-miscUpgrade golang-tests | May 31, 2024 | Mar 5, 2024 |
| Amazon_linux_2023 | — | Upgrade golang-srcUpgrade golangUpgrade golang-miscUpgrade golang-testsUpgrade golang-binUpgrade golang-docsUpgrade golang-shared | Feb 17, 2025 | Mar 5, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Mar 5, 2024 |
| Freebsd | — | Upgrade go121Upgrade go122Upgrade oauth2-proxy | Oct 18, 2024 | Oct 18, 2024 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jul 16, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Jun 26, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Oct 8, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jul 17, 2024 | Mar 5, 2024 |
| Oracle_linux | — | Upgrade oci-seccomp-bpf-hookUpgrade golang-binUpgrade podman-pluginsUpgrade golang-testsUpgrade conmonUpgrade netavarkUpgrade criuUpgrade podman-testsUpgrade crunUpgrade libslirp-develUpgrade containernetworking-pluginsUpgrade python3-podmanUpgrade containers-commonUpgrade criu-libsUpgrade skopeo-testsUpgrade skopeoUpgrade criu-develUpgrade delveUpgrade podmanUpgrade fuse-overlayfsUpgrade podman-catatonitUpgrade runcUpgrade golang-srcUpgrade buildahUpgrade libslirpUpgrade golangUpgrade buildah-testsUpgrade slirp4netnsUpgrade golang-miscUpgrade container-selinuxUpgrade golang-docsUpgrade podman-gvproxyUpgrade python3-criuUpgrade critUpgrade aardvark-dnsUpgrade podman-dockerUpgrade podman-remoteUpgrade cockpit-podmanUpgrade udicaUpgrade go-toolset | May 8, 2024 | Mar 5, 2024 |
| Redhat Openshift | — | Upgrade ose-aws-ecr-image-credential-providerUpgrade ose-azure-acr-image-credential-providerUpgrade ose-gcp-gcr-image-credential-providerUpgrade openshiftUpgrade podman | Jun 28, 2024 | Mar 5, 2024 |
| Redhat_linux | — | Upgrade fuse-overlayfs-debugsourceUpgrade podman-catatonitUpgrade criuUpgrade criu-debugsourceUpgrade buildah-debuginfoUpgrade cockpit-podmanUpgrade python3-podmanUpgrade go-toolsetUpgrade oci-seccomp-bpf-hookUpgrade toolbox-testsUpgrade podman-remoteUpgrade golang-srcUpgrade buildahUpgrade podman-debuginfoUpgrade runc-debugsourceNo solution existsUpgrade containers-commonUpgrade delve-debuginfoUpgrade golang-testsUpgrade golang-miscUpgrade criu-libsUpgrade conmon-debuginfoUpgrade criu-debuginfoUpgrade fuse-overlayfsUpgrade aardvark-dnsUpgrade conmon-debugsourceUpgrade buildah-testsUpgrade crun-debuginfoUpgrade buildah-tests-debuginfoUpgrade golangUpgrade netavarkUpgrade crun-debugsourceUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade python3-criuUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-develUpgrade libslirp-debuginfoUpgrade toolbox-debugsourceUpgrade skopeo-testsUpgrade podman-dockerUpgrade conmonUpgrade golang-docsUpgrade containernetworking-plugins-debugsourceUpgrade skopeoUpgrade slirp4netns-debuginfoUpgrade podman-plugins-debuginfoUpgrade delveUpgrade criu-develUpgrade buildah-debugsourceUpgrade slirp4netns-debugsourceUpgrade runcUpgrade delve-debugsourceUpgrade crunUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade podman-debugsourceUpgrade golang-binUpgrade podman-gvproxyUpgrade libslirp-debugsourceUpgrade podman-testsUpgrade toolboxUpgrade podman-pluginsUpgrade critUpgrade fuse-overlayfs-debuginfoUpgrade slirp4netnsUpgrade criu-libs-debuginfoUpgrade libslirpUpgrade podman-gvproxy-debuginfoUpgrade runc-debuginfoUpgrade udicaUpgrade containernetworking-plugins-debuginfoUpgrade container-selinuxUpgrade toolbox-debuginfo | May 1, 2024 | Mar 5, 2024 |
| Rocky_linux | — | Upgrade go-toolsetUpgrade slirp4netnsUpgrade aardvark-dnsUpgrade conmon-debugsourceUpgrade crun-debugsourceUpgrade buildah-debuginfoUpgrade buildahUpgrade conmon-debuginfoUpgrade python3-criuUpgrade containers-commonUpgrade podman-plugins-debuginfoUpgrade buildah-tests-debuginfoUpgrade criuUpgrade delve-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade buildah-testsUpgrade criu-debuginfoUpgrade criu-debugsourceUpgrade podman-gvproxyUpgrade crun-debuginfoUpgrade toolbox-testsUpgrade golang-binUpgrade containernetworking-pluginsUpgrade fuse-overlayfsUpgrade podman-debuginfoUpgrade golangUpgrade libslirp-debuginfoUpgrade netavarkUpgrade podman-remoteUpgrade runc-debugsourceUpgrade podman-catatonitUpgrade skopeo-testsUpgrade criu-libs-debuginfoUpgrade conmonUpgrade toolboxUpgrade podman-gvproxy-debuginfoUpgrade podman-remote-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade skopeoUpgrade podman-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade delveUpgrade containernetworking-plugins-debugsourceUpgrade podmanUpgrade libslirpUpgrade toolbox-debugsourceUpgrade podman-debugsourceUpgrade critUpgrade crunUpgrade libslirp-develUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-debugsourceUpgrade slirp4netns-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade libslirp-debugsourceUpgrade criu-develUpgrade delve-debugsourceUpgrade criu-libsUpgrade runc-debuginfoUpgrade podman-catatonit-debuginfoUpgrade toolbox-debuginfoUpgrade slirp4netns-debugsourceUpgrade runc | May 13, 2024 | Mar 5, 2024 |
| Suse | — | Upgrade go1.22-opensslUpgrade go1.21-openssl-docUpgrade go1.21-raceUpgrade go1.21-openssl-raceUpgrade go1.21-opensslUpgrade go1.22-docUpgrade go1.22Upgrade go1.21Upgrade go1.21-docUpgrade go1.22-openssl-docUpgrade go1.22-raceUpgrade go1.22-openssl-race | Mar 8, 2024 | Mar 5, 2024 |
| Ubuntu | — | Upgrade golang-1.21-goUpgrade golang-1.22-goUpgrade golang-1.21-srcUpgrade golang-1.18Upgrade golang-1.17Upgrade golang-1.22-srcUpgrade golang-1.21Upgrade golang-1.17-goUpgrade golang-1.17-srcUpgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.22Upgrade golang-1.18-goUpgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.18-src | Jul 10, 2024 | Mar 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub