The ParseAddressList function incorrectly handles comments (text within parentheses) within display names. Since this is a misalignment with conforming address parsers, it can result in different trust decisions being made by programs using different parsers.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-testsUpgrade golangUpgrade python3-criuUpgrade go-toolsetUpgrade podman-gvproxyUpgrade cockpit-podmanUpgrade podman-dockerUpgrade toolbox-testsUpgrade runcUpgrade netavarkUpgrade buildah-testsUpgrade udicaUpgrade slirp4netnsUpgrade podman-catatonitUpgrade aardvark-dnsUpgrade golang-srcUpgrade fuse-overlayfsUpgrade critUpgrade libslirpUpgrade buildahUpgrade criuUpgrade golang-miscUpgrade crunUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade criu-libsUpgrade podmanUpgrade skopeoUpgrade libslirp-develUpgrade golang-binUpgrade conmonUpgrade podman-remoteUpgrade criu-develUpgrade golang-docsUpgrade container-selinuxUpgrade golang-testsUpgrade toolboxUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade podman-pluginsUpgrade delveUpgrade python3-podman | May 8, 2024 | Mar 5, 2024 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Mar 5, 2024 |
| Amazon Linux Ami 2 | — | Upgrade golang-binUpgrade golang-sharedUpgrade golang-docsUpgrade golang-miscUpgrade golangUpgrade golang-testsUpgrade golang-src | May 31, 2024 | Mar 5, 2024 |
| Amazon_linux_2023 | — | Upgrade golang-binUpgrade golang-testsUpgrade golang-docsUpgrade golang-sharedUpgrade golangUpgrade golang-srcUpgrade golang-misc | Feb 17, 2025 | Mar 5, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Mar 5, 2024 |
| Freebsd | — | Upgrade go122Upgrade go121Upgrade oauth2-proxy | Oct 18, 2024 | Oct 18, 2024 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jul 16, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Jun 26, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Oct 8, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Jul 17, 2024 | Mar 5, 2024 |
| Oracle_linux | — | Upgrade criu-libsUpgrade delveUpgrade podman-catatonitUpgrade podmanUpgrade podman-testsUpgrade netavarkUpgrade python3-podmanUpgrade golang-binUpgrade podman-pluginsUpgrade golang-testsUpgrade containers-commonUpgrade libslirp-develUpgrade conmonUpgrade criuUpgrade containernetworking-pluginsUpgrade skopeoUpgrade skopeo-testsUpgrade crunUpgrade criu-develUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hookUpgrade podman-remoteUpgrade podman-dockerUpgrade podman-gvproxyUpgrade python3-criuUpgrade cockpit-podmanUpgrade buildahUpgrade go-toolsetUpgrade udicaUpgrade slirp4netnsUpgrade golang-miscUpgrade container-selinuxUpgrade critUpgrade aardvark-dnsUpgrade libslirpUpgrade golang-docsUpgrade runcUpgrade golangUpgrade buildah-testsUpgrade golang-src | May 8, 2024 | Mar 5, 2024 |
| Redhat Openshift | — | Upgrade ose-gcp-gcr-image-credential-providerUpgrade podmanUpgrade openshiftUpgrade ose-azure-acr-image-credential-providerUpgrade ose-aws-ecr-image-credential-provider | Jun 28, 2024 | Mar 5, 2024 |
| Redhat_linux | — | Upgrade golang-srcUpgrade go-toolsetUpgrade cockpit-podmanUpgrade oci-seccomp-bpf-hookUpgrade delve-debuginfoUpgrade conmon-debuginfoUpgrade toolbox-testsUpgrade python3-podmanUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfsUpgrade golang-miscUpgrade containernetworking-pluginsUpgrade criu-debugsourceUpgrade podman-remoteUpgrade buildah-debuginfoUpgrade aardvark-dnsUpgrade conmon-debugsourceUpgrade golang-testsUpgrade criuUpgrade netavarkUpgrade buildah-tests-debuginfoNo solution existsUpgrade containers-commonUpgrade crun-debugsourceUpgrade crun-debuginfoUpgrade podman-catatonitUpgrade golangUpgrade runc-debugsourceUpgrade buildah-testsUpgrade criu-debuginfoUpgrade criu-libsUpgrade buildahUpgrade podman-debuginfoUpgrade runc-debuginfoUpgrade libslirpUpgrade crunUpgrade podman-testsUpgrade delveUpgrade container-selinuxUpgrade toolbox-debuginfoUpgrade podmanUpgrade containernetworking-plugins-debuginfoUpgrade podman-debugsourceUpgrade skopeoUpgrade podman-catatonit-debuginfoUpgrade skopeo-testsUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolbox-debugsourceUpgrade podman-dockerUpgrade libslirp-debuginfoUpgrade libslirp-develUpgrade delve-debugsourceUpgrade buildah-debugsourceUpgrade slirp4netns-debugsourceUpgrade runcUpgrade criu-develUpgrade criu-libs-debuginfoUpgrade golang-docsUpgrade libslirp-debugsourceUpgrade toolboxUpgrade podman-gvproxyUpgrade podman-pluginsUpgrade slirp4netnsUpgrade conmonUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade golang-binUpgrade critUpgrade udicaUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade python3-criuUpgrade slirp4netns-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-gvproxy-debuginfo | May 1, 2024 | Mar 5, 2024 |
| Rocky_linux | — | Upgrade golang-binUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade python3-criuUpgrade podman-plugins-debuginfoUpgrade criuUpgrade buildah-debuginfoUpgrade buildah-tests-debuginfoUpgrade conmon-debugsourceUpgrade buildahUpgrade containers-commonUpgrade crun-debugsourceUpgrade conmon-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade delve-debuginfoUpgrade go-toolsetUpgrade slirp4netnsUpgrade aardvark-dnsUpgrade runc-debugsourceUpgrade crun-debuginfoUpgrade podman-debuginfoUpgrade podman-remoteUpgrade criu-debuginfoUpgrade criu-debugsourceUpgrade toolbox-testsUpgrade podman-gvproxyUpgrade buildah-testsUpgrade netavarkUpgrade golangUpgrade libslirp-debuginfoUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade delve-debugsourceUpgrade conmonUpgrade slirp4netns-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podman-remote-debuginfoUpgrade skopeo-testsUpgrade libslirp-debugsourceUpgrade runcUpgrade toolbox-debugsourceUpgrade podman-debugsourceUpgrade critUpgrade podman-testsUpgrade criu-libs-debuginfoUpgrade skopeoUpgrade delveUpgrade containernetworking-plugins-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade podmanUpgrade libslirpUpgrade toolboxUpgrade criu-develUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-develUpgrade buildah-debugsourceUpgrade crunUpgrade podman-pluginsUpgrade toolbox-debuginfoUpgrade podman-catatonit-debuginfoUpgrade criu-libsUpgrade runc-debuginfo | May 13, 2024 | Mar 5, 2024 |
| Suse | — | Upgrade go1.21-openssl-raceUpgrade go1.22-opensslUpgrade go1.21-opensslUpgrade go1.21-raceUpgrade go1.21-openssl-docUpgrade go1.21-docUpgrade go1.22Upgrade go1.22-openssl-raceUpgrade go1.21Upgrade go1.22-docUpgrade go1.22-raceUpgrade go1.22-openssl-doc | Mar 8, 2024 | Mar 5, 2024 |
| Ubuntu | — | Upgrade golang-1.21-srcUpgrade golang-1.22-goUpgrade golang-1.17Upgrade golang-1.18Upgrade golang-1.21-goUpgrade golang-1.22-srcUpgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.17-srcUpgrade golang-1.17-goUpgrade golang-1.18-srcUpgrade golang-1.22Upgrade golang-1.21Upgrade golang-1.18-goUpgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.18-go (Ubuntu Pro) | Jul 10, 2024 | Mar 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub