The ParseAddressList function incorrectly handles comments (text within parentheses) within display names. Since this is a misalignment with conforming address parsers, it can result in different trust decisions being made by programs using different parsers.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-gvproxyUpgrade toolbox-testsUpgrade go-toolsetUpgrade libslirpUpgrade aardvark-dnsUpgrade podman-dockerUpgrade python3-criuUpgrade runcUpgrade podman-catatonitUpgrade critUpgrade golang-srcUpgrade udicaUpgrade golangUpgrade netavarkUpgrade buildah-testsUpgrade cockpit-podmanUpgrade criuUpgrade golang-miscUpgrade slirp4netnsUpgrade podman-testsUpgrade fuse-overlayfsUpgrade buildahUpgrade oci-seccomp-bpf-hookUpgrade crunUpgrade criu-develUpgrade libslirp-develUpgrade conmonUpgrade toolboxUpgrade podman-pluginsUpgrade containers-commonUpgrade delveUpgrade golang-docsUpgrade container-selinuxUpgrade skopeoUpgrade podman-remoteUpgrade golang-testsUpgrade golang-binUpgrade podmanUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade python3-podmanUpgrade skopeo-tests | May 8, 2024 | Mar 5, 2024 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Mar 5, 2024 |
| Amazon Linux Ami 2 | — | Upgrade golang-sharedUpgrade golang-binUpgrade golang-docsUpgrade golangUpgrade golang-miscUpgrade golang-testsUpgrade golang-src | May 31, 2024 | Mar 5, 2024 |
| Amazon_linux_2023 | — | Upgrade golang-docsUpgrade golang-sharedUpgrade golang-testsUpgrade golang-binUpgrade golang-miscUpgrade golang-srcUpgrade golang | Feb 17, 2025 | Mar 5, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Mar 5, 2024 |
| Freebsd | — | Upgrade oauth2-proxyUpgrade go122Upgrade go121 | Oct 18, 2024 | Oct 18, 2024 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jul 16, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Jun 26, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Oct 8, 2024 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jul 17, 2024 | Mar 5, 2024 |
| Oracle_linux | — | Upgrade podman-gvproxyUpgrade container-selinuxUpgrade podman-remoteUpgrade slirp4netnsUpgrade podman-dockerUpgrade runcUpgrade golang-miscUpgrade python3-criuUpgrade buildahUpgrade golang-docsUpgrade udicaUpgrade buildah-testsUpgrade libslirpUpgrade cockpit-podmanUpgrade go-toolsetUpgrade golangUpgrade aardvark-dnsUpgrade critUpgrade golang-srcUpgrade golang-binUpgrade netavarkUpgrade golang-testsUpgrade python3-podmanUpgrade podmanUpgrade crunUpgrade podman-testsUpgrade conmonUpgrade libslirp-develUpgrade criuUpgrade containernetworking-pluginsUpgrade skopeoUpgrade fuse-overlayfsUpgrade skopeo-testsUpgrade criu-develUpgrade containers-commonUpgrade delveUpgrade criu-libsUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hookUpgrade podman-plugins | May 8, 2024 | Mar 5, 2024 |
| Redhat Openshift | — | Upgrade ose-gcp-gcr-image-credential-providerUpgrade openshiftUpgrade podmanUpgrade ose-azure-acr-image-credential-providerUpgrade ose-aws-ecr-image-credential-provider | Jun 28, 2024 | Mar 5, 2024 |
| Redhat_linux | — | Upgrade podman-remote-debuginfoUpgrade toolbox-debugsourceUpgrade python3-criuUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade delve-debugsourceUpgrade libslirp-develUpgrade delveUpgrade container-selinuxUpgrade crunUpgrade slirp4netns-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade udicaUpgrade podman-plugins-debuginfoUpgrade toolbox-debuginfoUpgrade slirp4netnsUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-debugsourceUpgrade skopeoUpgrade containernetworking-plugins-debuginfoUpgrade podmanUpgrade runcUpgrade podman-catatonit-debuginfoUpgrade criu-develUpgrade runc-debuginfoUpgrade criu-libs-debuginfoUpgrade podman-dockerUpgrade fuse-overlayfs-debuginfoUpgrade toolboxUpgrade critUpgrade golang-binUpgrade libslirp-debugsourceUpgrade podman-pluginsUpgrade slirp4netns-debugsourceUpgrade golang-docsUpgrade podman-gvproxyUpgrade conmonUpgrade libslirpUpgrade buildah-debugsourceUpgrade podman-testsUpgrade containernetworking-plugins-debugsourceUpgrade golang-testsUpgrade buildahUpgrade podman-debuginfoUpgrade runc-debugsourceUpgrade conmon-debuginfoUpgrade toolbox-testsUpgrade python3-podmanUpgrade cockpit-podmanUpgrade go-toolsetUpgrade criu-debuginfoUpgrade criu-libsUpgrade fuse-overlayfs-debugsourceUpgrade criu-debugsourceUpgrade buildah-debuginfoUpgrade podman-catatonitUpgrade criuUpgrade podman-remoteUpgrade conmon-debugsourceUpgrade netavarkUpgrade golangUpgrade crun-debugsourceUpgrade crun-debuginfoUpgrade aardvark-dnsUpgrade containers-commonUpgrade fuse-overlayfsUpgrade buildah-tests-debuginfoNo solution existsUpgrade delve-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade golang-srcUpgrade buildah-testsUpgrade golang-miscUpgrade containernetworking-plugins | May 1, 2024 | Mar 5, 2024 |
| Rocky_linux | — | Upgrade criu-debuginfoUpgrade criu-debugsourceUpgrade buildah-tests-debuginfoUpgrade conmon-debuginfoUpgrade netavarkUpgrade delve-debuginfoUpgrade go-toolsetUpgrade conmon-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade slirp4netnsUpgrade aardvark-dnsUpgrade criuUpgrade libslirp-debuginfoUpgrade podman-gvproxyUpgrade buildah-testsUpgrade containernetworking-pluginsUpgrade podman-debuginfoUpgrade runc-debugsourceUpgrade fuse-overlayfsUpgrade toolbox-testsUpgrade python3-criuUpgrade crun-debuginfoUpgrade buildah-debuginfoUpgrade podman-catatonitUpgrade podman-remoteUpgrade buildahUpgrade containers-commonUpgrade golangUpgrade podman-plugins-debuginfoUpgrade crun-debugsourceUpgrade golang-binUpgrade criu-libs-debuginfoUpgrade delve-debugsourceUpgrade critUpgrade toolbox-debugsourceUpgrade skopeoUpgrade podman-testsUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-debugsourceUpgrade libslirp-develUpgrade crunUpgrade podman-pluginsUpgrade containernetworking-plugins-debuginfoUpgrade conmonUpgrade toolboxUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade delveUpgrade runcUpgrade skopeo-testsUpgrade toolbox-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade libslirp-debugsourceUpgrade criu-develUpgrade slirp4netns-debugsourceUpgrade podman-remote-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade libslirpUpgrade containernetworking-plugins-debugsourceUpgrade podmanUpgrade podman-gvproxy-debuginfoUpgrade podman-catatonit-debuginfoUpgrade runc-debuginfoUpgrade criu-libs | May 13, 2024 | Mar 5, 2024 |
| Suse | — | Upgrade go1.21-docUpgrade go1.22-docUpgrade go1.22-openssl-docUpgrade go1.22-raceUpgrade go1.22Upgrade go1.21Upgrade go1.22-openssl-raceUpgrade go1.21-opensslUpgrade go1.21-openssl-raceUpgrade go1.21-openssl-docUpgrade go1.21-raceUpgrade go1.22-openssl | Mar 8, 2024 | Mar 5, 2024 |
| Ubuntu | — | Upgrade golang-1.17Upgrade golang-1.18Upgrade golang-1.22-srcUpgrade golang-1.22-goUpgrade golang-1.21-srcUpgrade golang-1.21-goUpgrade golang-1.21Upgrade golang-1.22Upgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.17-srcUpgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.17-go | Jul 10, 2024 | Mar 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub