Fluid Attacks Database

Description

Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rpm rhel10	golang	<0:1.26.4-1.el10_2	0:1.26.4-1.el10_2
rpm rhel10	bootc-image-builder	-	-
rpm rhel10	gvisor-tap-vsock	-	-
rpm rhel10	butane	-	-
rpm rhel8	git-lfs	-	-
rpm rhel10	go-fdo-client	<0:1.0.0-4.el10_2.7	0:1.0.0-4.el10_2.7
rpm rhel10.0	golang	<0:1.26.7-1.el10_0	0:1.26.7-1.el10_0
rpm rhel9.6	golang	<0:1.26.5-1.el9_6	0:1.26.5-1.el9_6
rpm rhel10	golang-github-openprinting-ipp-usb	<0:0.9.27-7.el10_2.3	0:0.9.27-7.el10_2.3
rpm rhel8	grafana	<0:9.2.10-33.el8_10	0:9.2.10-33.el8_10

1-10 of 46

Aliases

References

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.