Към съдържанието
Търсене

CVE-2026-39820: Go standard library net/mail, невалидиран вход

7.5

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката може да се автоматизира

Описание

Оригинално описание

Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.

Засегнати продукти

  • Go standard library net/mail: преди 1.25.10; 1.26.0-0 преди 1.26.3
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8: 0:2.5.10-7.el8ap преди *
  • Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9: 0:2.6.17-2.el9ap преди *
  • Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9: 0:2.6.17-2.el9ap преди *
  • Red Hat Red Hat Enterprise Linux 10: 0:1.26.3-4.el10_2 преди *
  • Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support: 0:1.26.5-1.el10_0 преди *
  • Red Hat Red Hat Enterprise Linux 8: 8100020260518131104.a3795dee преди *
  • Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service: 0:75-10.el8_8 преди *
  • Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions: 0:75-10.el8_8 преди *
  • Red Hat Red Hat Enterprise Linux 9: 0:1.26.3-1.el9_8 преди *
  • Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions: 0:1.26.5-1.el9_2 преди *
  • Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions: 0:1.26.5-1.el9_4 преди *
  • Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support: 0:1.26.5-1.el9_6 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.12: 0:1.25.5-34.rhaos4.12.git6120b13.el8 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.13: 0:1.26.5-32.rhaos4.13.git1088e36.el8 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.16: 0:1.29.13-12.rhaos4.16.git979a5e6.el8 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.17: 0:1.30.14-11.rhaos4.17.git1e2a16d.el8 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.18: 0:1.31.13-11.rhaos4.18.git817a650.el9 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.19: 0:1.32.13-9.rhaos4.19.git2100f27.el9 преди *
  • Red Hat RHEM 1.1 for RHEL 10: 0:1.1.4-1.el10em преди *
  • Red Hat RHEM 1.1 for RHEL 9: 0:1.1.4-1.el9em преди *
  • Red Hat Cert Manager support for Red Hat OpenShift release 1.19: 1786613805 преди *
  • Red Hat Logging for Red Hat OpenShift 6: 1785419067 преди *
  • Red Hat Logging for Red Hat OpenShift 6.2: 1784748010 преди *
  • Red Hat Logging Subsystem for Red Hat OpenShift 6.4: 1782405469 преди *
  • Red Hat Logging Subsystem for Red Hat OpenShift 6.5: 1786645248 преди *
  • Red Hat multicluster engine for Kubernetes 2.11: 1786912006 преди *
  • Red Hat OpenShift API for Data Protection 1.3: 1785177357 преди *
  • Red Hat OpenShift API for Data Protection 1.4: 1786946116 преди *
  • Red Hat OpenShift API for Data Protection 1.5: 1788860461 преди *
  • Red Hat OpenShift API for Data Protection 1.6: 1784058822 преди *
  • Red Hat Red Hat Advanced Cluster Security 4.9: 1783357116 преди *
  • Red Hat Red Hat Advanced Cluster Security for Kubernetes 4.10: 1783357140 преди *
  • Red Hat Red Hat Developer Hub 1.10: 1783447707 преди *
  • Red Hat Red Hat Developer Hub 1.9: 1782767215 преди *
  • Red Hat Red Hat Hardened Images: 1.25.11-2.hum1 преди *
  • Red Hat Red Hat Migration Toolkit 1.8: 1783953372 преди *
  • Red Hat Red Hat Migration Toolkit for Applications 8.1: 1785171639 преди *
  • Red Hat Red Hat Migration Toolkit for Applications 8.2: 1784211378 преди *
  • Red Hat Red Hat OpenShift AI 2.25: 1783544461 преди *
  • Red Hat Red Hat OpenShift AI 3.4: 1787102977 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.14: 1787002807 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.20: 1786494900 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.21: 1786496647 преди *
  • Red Hat Red Hat OpenShift Dev Spaces 3.30: 1787756267 преди *
  • Red Hat Red Hat OpenShift distributed tracing 3.10.2: 1785704547 преди *
  • Red Hat Red Hat OpenShift Service Mesh 3.0: 1782222217 преди *
  • Red Hat Red Hat OpenShift Service Mesh 3.1: 1782222163 преди *
  • Red Hat Red Hat OpenShift Service Mesh 3.2: 1782226178 преди *
  • Red Hat Red Hat OpenShift Service Mesh 3.3: 1782223045 преди *
  • Red Hat Red Hat OpenShift Workload Availability 0.12: 1785202723 преди *
  • Red Hat Red Hat OpenShift Workload Availability 0.13: 1785203036 преди *
  • Red Hat Red Hat OpenShift Workload Availability 0.3: 1785203474 преди *
  • Red Hat Red Hat OpenShift Workload Availability 0.7: 1785203508 преди *
  • Red Hat Red Hat OpenShift Workload Availability 0.8: 1785203079 преди *
  • Red Hat Red Hat OpenShift Workload Availability 5.7: 1785202847 преди *
  • Red Hat Red Hat Quay 3.10: 1783750447 преди *
  • Red Hat Red Hat Quay 3.12: 1783751865 преди *; 1784353904 преди *
  • Red Hat Red Hat Quay 3.15: 1784351966 преди *
  • Red Hat Red Hat Quay 3.16: 1783955846 преди *
  • Red Hat Red Hat Quay 3.9: 1784125838 преди *
  • Red Hat Red Hat Trusted Artifact Signer 1.4: 4-1.4.2 преди *; 4-1.4.3 преди *
  • Red Hat Assisted Installer for Red Hat OpenShift Container Platform 2
  • Red Hat Confidential Compute Attestation
  • Red Hat Cryostat 4
  • Red Hat Custom Metric Autoscaler operator for Red Hat Openshift
  • Red Hat ExternalDNS Operator
  • Red Hat External Secrets Operator for Red Hat OpenShift
  • Red Hat File Integrity Operator
  • Red Hat Gatekeeper 3
  • Red Hat Logical Volume Manager Storage
  • Red Hat Multiarch Tuning Operator
  • Red Hat Multicluster Engine for Kubernetes
  • Red Hat Multicluster Global Hub
  • Red Hat Network Observability Operator
  • Red Hat OpenShift Developer Tools and Services
  • Red Hat OpenShift Lightspeed
  • Red Hat OpenShift Pipelines
  • Red Hat OpenShift Serverless
  • Red Hat OpenShift Service Mesh 2
  • Red Hat OpenShift Service Mesh 3
  • Red Hat Power monitoring for Red Hat OpenShift
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Red Hat Ansible Automation Platform 2
  • Red Hat Red Hat Ceph Storage 5
  • Red Hat Red Hat Ceph Storage 6
  • Red Hat Red Hat Ceph Storage 9
  • Red Hat Red Hat Certification Program for Red Hat Enterprise Linux 9
  • Red Hat Red Hat Edge Manager 1
  • Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3
  • Red Hat Red Hat Lightspeed for Runtimes Operator
  • Red Hat Red Hat OpenShift AI (RHOAI)
  • Red Hat Red Hat OpenShift Cluster Manager CLI
  • Red Hat Red Hat OpenShift Container Platform 4
  • Red Hat Red Hat Openshift Data Foundation 4
  • Red Hat Red Hat OpenShift Dev Workspaces Operator
  • Red Hat Red Hat OpenShift for Windows Containers
  • Red Hat Red Hat OpenShift GitOps
  • Red Hat Red Hat OpenShift Virtualization 4
  • Red Hat Red Hat OpenStack Platform 16.2
  • Red Hat Red Hat OpenStack Platform 17.1
  • Red Hat Red Hat OpenStack Platform 18.0
  • Red Hat Red Hat Quay 3
  • Red Hat Red Hat Satellite 6
  • Red Hat Red Hat Service Interconnect 1
  • Red Hat Red Hat Service Interconnect 2
  • Red Hat Security Profiles Operator
  • Red Hat Zero Trust Workload Identity Manager
  • Red Hat Zero Trust Workload Identity Manager - Tech Preview

Вид слабост

История

  • 7 май 2026 Публикувано

Други уязвимости в Go standard library net/mail

Първоизточници

CVE-2026-39820: Go standard library net/mail, невалидиран вход | freedomonline.bg