Fluid Attacks Database

Description

Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rpm rhel9	golang	<0:1.26.3-1.el9_8	0:1.26.3-1.el9_8
rpm rhel9.6	golang	<0:1.26.5-1.el9_6	0:1.26.5-1.el9_6
rpm rhel10	image-builder	<0:52.1-1.el10_2.2	0:52.1-1.el10_2.2
rpm rhel10	buildah	<2:1.43.1-5.el10_2	2:1.43.1-5.el10_2
rpm rhel10	grafana	<0:10.2.6-28.el10_2.5	0:10.2.6-28.el10_2.5
rpm rhel10.0	grafana	<0:10.2.6-26.el10_0	0:10.2.6-26.el10_0
rpm rhel8	grafana	<0:9.2.10-33.el8_10	0:9.2.10-33.el8_10
rpm rhel9	grafana	<0:10.2.6-23.el9_8.3	0:10.2.6-23.el9_8.3
rpm rhel9.6	grafana	<0:10.2.6-22.el9_6	0:10.2.6-22.el9_6
rpm rhel10	gvisor-tap-vsock	-	-

1-10 of 41

Aliases

References

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.