The ParseAddressList function incorrectly handles comments (text within parentheses) within display names. Since this is a misalignment with conforming address parsers, it can result in different trust decisions being made by programs using different parsers.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-pluginsUpgrade criu-libsUpgrade podmanUpgrade containers-commonUpgrade golang-docsUpgrade python3-podmanUpgrade libslirp-develUpgrade containernetworking-pluginsUpgrade toolboxUpgrade podman-remoteUpgrade oci-seccomp-bpf-hookUpgrade golang-testsUpgrade skopeoUpgrade skopeo-testsUpgrade delveUpgrade golang-binUpgrade container-selinuxUpgrade crunUpgrade criu-develUpgrade conmonUpgrade buildahUpgrade buildah-testsUpgrade runcUpgrade go-toolsetUpgrade toolbox-testsUpgrade criuUpgrade fuse-overlayfsUpgrade podman-testsUpgrade python3-criuUpgrade udicaUpgrade podman-gvproxyUpgrade aardvark-dnsUpgrade golang-srcUpgrade libslirpUpgrade critUpgrade golang-miscUpgrade golangUpgrade podman-dockerUpgrade cockpit-podmanUpgrade netavarkUpgrade podman-catatonitUpgrade slirp4netns | May 8, 2024 | Mar 5, 2024 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Mar 5, 2024 |
| Amazon Linux Ami 2 | — | Upgrade golangUpgrade golang-srcUpgrade golang-miscUpgrade golang-testsUpgrade golang-sharedUpgrade golang-binUpgrade golang-docs | May 31, 2024 | Mar 5, 2024 |
| Amazon_linux_2023 | — | Upgrade golang-miscUpgrade golangUpgrade golang-srcUpgrade golang-sharedUpgrade golang-docsUpgrade golang-tests | Feb 17, 2025 | Mar 5, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Mar 5, 2024 |
| Freebsd | — | Upgrade oauth2-proxyUpgrade go121Upgrade go122 | Oct 18, 2024 | Oct 18, 2024 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jul 16, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jun 26, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Oct 8, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jul 17, 2024 | Mar 5, 2024 |
| Oracle_linux | — | Upgrade podman-dockerUpgrade podman-remoteUpgrade python3-criuUpgrade golang-miscUpgrade slirp4netnsUpgrade cockpit-podmanUpgrade libslirpUpgrade critUpgrade container-selinuxUpgrade podman-gvproxyUpgrade runcUpgrade golangUpgrade buildah-testsUpgrade aardvark-dnsUpgrade golang-srcUpgrade buildahUpgrade go-toolsetUpgrade golang-docsUpgrade udicaUpgrade fuse-overlayfsUpgrade skopeoUpgrade crunUpgrade podman-testsUpgrade podmanUpgrade containernetworking-pluginsUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade podman-catatonitUpgrade delveUpgrade skopeo-testsUpgrade python3-podmanUpgrade podman-pluginsUpgrade golang-binUpgrade golang-testsUpgrade libslirp-develUpgrade criuUpgrade conmonUpgrade containers-commonUpgrade criu-devel | May 8, 2024 | Mar 5, 2024 |
| Redhat Openshift | — | Upgrade ose-aws-ecr-image-credential-providerUpgrade ose-gcp-gcr-image-credential-providerUpgrade ose-azure-acr-image-credential-providerUpgrade podmanUpgrade openshift | Jun 28, 2024 | Mar 5, 2024 |
| Redhat_linux | — | Upgrade udicaUpgrade podman-plugins-debuginfoUpgrade container-selinuxUpgrade podman-gvproxy-debuginfoUpgrade delveUpgrade toolbox-debuginfoUpgrade slirp4netns-debuginfoUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-remote-debuginfoUpgrade toolbox-debugsourceUpgrade python3-criuUpgrade containernetworking-plugins-debuginfoUpgrade critUpgrade podman-dockerUpgrade crunUpgrade skopeoUpgrade libslirpUpgrade podman-catatonit-debuginfoUpgrade golang-binUpgrade conmonUpgrade criu-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-pluginsUpgrade podman-gvproxyUpgrade skopeo-testsUpgrade containernetworking-plugins-debugsourceUpgrade podmanUpgrade criu-libs-debuginfoUpgrade runc-debuginfoUpgrade buildah-debugsourceUpgrade podman-testsUpgrade libslirp-develUpgrade slirp4netns-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade toolboxUpgrade libslirp-debugsourceUpgrade delve-debugsourceUpgrade slirp4netnsUpgrade golang-docsUpgrade podman-debugsourceUpgrade runcUpgrade go-toolsetUpgrade criu-debugsourceNo solution existsUpgrade golangUpgrade conmon-debugsourceUpgrade fuse-overlayfsUpgrade crun-debuginfoUpgrade netavarkUpgrade podman-debuginfoUpgrade runc-debugsourceUpgrade buildahUpgrade golang-srcUpgrade golang-miscUpgrade conmon-debuginfoUpgrade python3-podmanUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfs-debugsourceUpgrade toolbox-testsUpgrade cockpit-podmanUpgrade buildah-testsUpgrade golang-testsUpgrade aardvark-dnsUpgrade delve-debuginfoUpgrade crun-debugsourceUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade buildah-debuginfoUpgrade podman-catatonitUpgrade criu-libsUpgrade criuUpgrade criu-debuginfoUpgrade containers-commonUpgrade buildah-tests-debuginfo | May 1, 2024 | Mar 5, 2024 |
| Rocky_linux | — | Upgrade toolbox-testsUpgrade buildah-testsUpgrade go-toolsetUpgrade podman-gvproxyUpgrade criu-debugsourceUpgrade criuUpgrade slirp4netnsUpgrade delve-debuginfoUpgrade libslirp-debuginfoUpgrade netavarkUpgrade criu-debuginfoUpgrade aardvark-dnsUpgrade conmon-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade podman-remoteUpgrade podman-debuginfoUpgrade runc-debugsourceUpgrade crun-debuginfoUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade podman-catatonitUpgrade podman-plugins-debuginfoUpgrade python3-criuUpgrade fuse-overlayfsUpgrade buildahUpgrade crun-debugsourceUpgrade buildah-debuginfoUpgrade golangUpgrade buildah-tests-debuginfoUpgrade conmon-debuginfoUpgrade golang-binUpgrade podmanUpgrade skopeo-testsUpgrade containernetworking-plugins-debugsourceUpgrade toolboxUpgrade conmonUpgrade libslirp-debugsourceUpgrade slirp4netns-debugsourceUpgrade runcUpgrade podman-remote-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade toolbox-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-plugins-debuginfoUpgrade skopeoUpgrade podman-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade delveUpgrade criu-libs-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-develUpgrade crunUpgrade buildah-debugsourceUpgrade podman-pluginsUpgrade criu-develUpgrade libslirpUpgrade podman-gvproxy-debuginfoUpgrade critUpgrade runc-debuginfoUpgrade podman-debugsourceUpgrade toolbox-debugsourceUpgrade podman-catatonit-debuginfoUpgrade delve-debugsourceUpgrade criu-libsUpgrade slirp4netns-debuginfo | May 13, 2024 | Mar 5, 2024 |
| Suse | — | Upgrade go1.22Upgrade go1.22-docUpgrade go1.22-openssl-raceUpgrade go1.22-raceUpgrade go1.22-openssl-docUpgrade go1.21Upgrade go1.21-docUpgrade go1.21-opensslUpgrade go1.22-opensslUpgrade go1.21-openssl-docUpgrade go1.21-raceUpgrade go1.21-openssl-race | Mar 8, 2024 | Mar 5, 2024 |
| Ubuntu | — | Upgrade golang-1.21-srcUpgrade golang-1.17Upgrade golang-1.21-goUpgrade golang-1.22-srcUpgrade golang-1.22-goUpgrade golang-1.18Upgrade golang-1.17-goUpgrade golang-1.18-srcUpgrade golang-1.17-srcUpgrade golang-1.18-goUpgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.22Upgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.21 | Jul 10, 2024 | Mar 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub