جزئیات آسیب‌پذیری
CVE-2026-39820
Go standard library net/mailRed Hat Assisted Installer for Red Hat OpenShift Container Platform 2Red Hat Confidential Compute AttestationRed Hat External Secrets Operator for Red Hat OpenShiftRed Hat ExternalDNS OperatorRed Hat File Integrity Operator
Quadratic string concatentation in consumeComment in net/mail
CVSS 3.1
7.5بالا
شرح رسمی (انگلیسی)
Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 7.5بالا | 3.1 | CISA ADP / Vulnrichment (CISA-ADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| 7.5بالا | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Go standard library | net/mail | v < 1.25.10 | CVEProject cvelistV5 (CNA) |
| Go standard library | net/mail | 1.26.0-0 ≤ v < 1.26.3 | CVEProject cvelistV5 (CNA) |
| Red Hat | Assisted Installer for Red Hat OpenShift Container Platform 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Confidential Compute Attestation | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Confidential Compute Attestation | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Confidential Compute Attestation | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | External Secrets Operator for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | ExternalDNS Operator | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | ExternalDNS Operator | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | File Integrity Operator | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Logical Volume Manager Storage | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multiarch Tuning Operator | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Developer Tools and Services | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Lightspeed | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Service Mesh 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Service Mesh 3 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Power monitoring for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ceph Storage 5 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ceph Storage 6 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ceph Storage 9 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Certification Program for Red Hat Enterprise Linux 9 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Edge Manager 1 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Lightspeed for Runtimes Operator | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Cluster Manager CLI | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Dev Workspaces Operator | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift GitOps | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift GitOps | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Virtualization 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Virtualization 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Openshift Data Foundation 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Quay 3 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Satellite 6 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Service Interconnect 1 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Service Interconnect 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Security Profiles Operator | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Zero Trust Workload Identity Manager | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview | همه | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۹۷- https://go.dev/issue/78566
- https://go.dev/cl/759940
- https://groups.google.com/g/golang-announce/c/qcCIEXso47M
- https://pkg.go.dev/vuln/GO-2026-4986
- https://access.redhat.com/security/cve/CVE-2026-39820 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2467820 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39820.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:68334 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:50319 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:59830 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:65838 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:56852 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60018 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57482 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54552 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:50336 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57845 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57914 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57401 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54883 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:49702 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:67517 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:65335 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:67974 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:66327 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22120 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:63022 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:65534 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:65116 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:65895 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22112 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:62407 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:66016 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:68504 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:61253 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:62754 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57649 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:68527 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:62753 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:49712 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:51112 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:65336 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:67975 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:62803 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22121 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:62406 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:65886 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:65117 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:65153 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54531 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34364 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:56340 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:47952 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:50843 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:51033 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:59467 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:66022 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:43692 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36319 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36625 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36754 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:33574 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:23262 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:23264 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41928 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:50300 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:43038 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42644 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60520 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:59833 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:56789 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:56854 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60023 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57487 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54555 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54583 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54602 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:62260 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:33120 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:33123 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:33142 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:33150 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54287 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54284 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54286 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54285 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54274 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54283 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:50205 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41031 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42146 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:43052 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42796 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41066 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40262 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36797 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57194 vendor-advisoryx_refsource_REDHAT
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۲/۱۷
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۶/۲۷
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- Go
پیش‌بینی بهره‌برداری (EPSS)
۰٫۷۸٪
احتمال بهره‌برداری در ۳۰ روز
۵۶٫۲٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- بله
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- جزئی
ضعف‌ها (CWE)
- CWE-606Unchecked Input for Loop Condition