Aller au contenu
en Se connecter
7.5 Élevée

CVE-2024-24784 The ParseAddressList function incorrectly handles comments (text within parentheses) within display names

Description

The ParseAddressList function incorrectly handles comments (text within parentheses) within display names. Since this is a misalignment with conforming address parsers, it can result in different trust decisions being made by programs using different parsers.

Produits et versions touchés

Produit Versions touchées Corrigé en
net/mail 1.22 1.22.0-0 → < 1.22.1 1.22.1
net/mail 1.21 premières → < 1.21.8 1.21.8
net\/mail 1.22 1.22.0-0 → < 1.22.1 1.22.1
net\/mail 1.21 premières → < 1.21.8 1.21.8

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de net/mail

Les 4 CVE de net/mail →
CVE-2026-39820 Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion… 7.5 Élevée CVE-2026-42499 Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322 7.5 Élevée CVE-2025-61725 The ParseAddress function constructs domain-literal address components through repeated string concatenation 7.5 Élevée
Suivre cette CVE