2467809 – (CVE-2026-42499) CVE-2026-42499 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

Bug 2467809 (CVE-2026-42499) - CVE-2026-42499 net/mail: golang: net/mail: Denial of Service via pathological email address parsing

Summary: CVE-2026-42499 net/mail: golang: net/mail: Denial of Service via pathological...

Keywords:
Status:	NEW
Alias:	CVE-2026-42499
Product:	Security Response
Classification:	Other
Component:	vulnerability
Sub Component:
Version:	unspecified
Hardware:	All
OS:	Linux
Priority:	high
Severity:	high
Target Milestone:	---
Assignee:	Product Security DevOps Team
QA Contact:
Docs Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+	depends on / blocked

Reported:	2026-05-07 20:01 UTC by OSIDB Bzimport
Modified:	2026-09-17 06:43 UTC (History)
CC List:	152 users (show)
Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments	(Terms of Use)

Links
System	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHSA-2026:22112	None	None	None	2026-06-01 01:04:33 UTC
Red Hat Product Errata	RHSA-2026:22120	None	None	None	2026-06-01 00:43:31 UTC
Red Hat Product Errata	RHSA-2026:22121	None	None	None	2026-06-01 01:00:34 UTC
Red Hat Product Errata	RHSA-2026:49702	None	None	None	2026-08-03 15:58:57 UTC
Red Hat Product Errata	RHSA-2026:49712	None	None	None	2026-08-03 17:33:34 UTC
Red Hat Product Errata	RHSA-2026:54552	None	None	None	2026-08-19 15:34:56 UTC
Red Hat Product Errata	RHSA-2026:56785	None	None	None	2026-08-26 09:57:37 UTC
Red Hat Product Errata	RHSA-2026:56852	None	None	None	2026-08-26 15:18:06 UTC
Red Hat Product Errata	RHSA-2026:56910	None	None	None	2026-08-26 15:35:47 UTC
Red Hat Product Errata	RHSA-2026:57482	None	None	None	2026-08-26 15:15:57 UTC
Red Hat Product Errata	RHSA-2026:57649	None	None	None	2026-08-20 18:47:14 UTC
Red Hat Product Errata	RHSA-2026:57845	None	None	None	2026-08-26 00:21:02 UTC
Red Hat Product Errata	RHSA-2026:57914	None	None	None	2026-08-26 10:47:55 UTC
Red Hat Product Errata	RHSA-2026:59830	None	None	None	2026-09-03 12:17:09 UTC
Red Hat Product Errata	RHSA-2026:60018	None	None	None	2026-09-03 09:05:59 UTC
Red Hat Product Errata	RHSA-2026:61253	None	None	None	2026-08-31 04:07:49 UTC
Red Hat Product Errata	RHSA-2026:62406	None	None	None	2026-09-02 07:10:05 UTC
Red Hat Product Errata	RHSA-2026:62407	None	None	None	2026-09-02 06:46:14 UTC
Red Hat Product Errata	RHSA-2026:62753	None	None	None	2026-09-02 16:55:51 UTC
Red Hat Product Errata	RHSA-2026:62754	None	None	None	2026-09-02 16:39:26 UTC
Red Hat Product Errata	RHSA-2026:62803	None	None	None	2026-09-02 19:13:31 UTC
Red Hat Product Errata	RHSA-2026:63022	None	None	None	2026-09-03 05:31:24 UTC
Red Hat Product Errata	RHSA-2026:63163	None	None	None	2026-09-04 00:59:57 UTC
Red Hat Product Errata	RHSA-2026:63332	None	None	None	2026-09-04 00:43:30 UTC
Red Hat Product Errata	RHSA-2026:63636	None	None	None	2026-09-09 00:32:22 UTC
Red Hat Product Errata	RHSA-2026:64818	None	None	None	2026-09-08 04:39:15 UTC
Red Hat Product Errata	RHSA-2026:65116	None	None	None	2026-09-08 08:02:13 UTC
Red Hat Product Errata	RHSA-2026:65117	None	None	None	2026-09-08 10:06:05 UTC
Red Hat Product Errata	RHSA-2026:65153	None	None	None	2026-09-08 11:45:54 UTC
Red Hat Product Errata	RHSA-2026:65335	None	None	None	2026-09-08 10:44:39 UTC
Red Hat Product Errata	RHSA-2026:65336	None	None	None	2026-09-08 11:15:16 UTC
Red Hat Product Errata	RHSA-2026:65534	None	None	None	2026-09-08 17:06:22 UTC
Red Hat Product Errata	RHSA-2026:65838	None	None	None	2026-09-17 06:43:05 UTC
Red Hat Product Errata	RHSA-2026:65886	None	None	None	2026-09-09 10:39:34 UTC
Red Hat Product Errata	RHSA-2026:65895	None	None	None	2026-09-09 10:49:40 UTC
Red Hat Product Errata	RHSA-2026:66327	None	None	None	2026-09-10 05:34:09 UTC
Red Hat Product Errata	RHSA-2026:67148	None	None	None	2026-09-14 13:30:30 UTC
Red Hat Product Errata	RHSA-2026:67517	None	None	None	2026-09-15 09:24:09 UTC
Red Hat Product Errata	RHSA-2026:67974	None	None	None	2026-09-16 12:21:28 UTC
Red Hat Product Errata	RHSA-2026:67975	None	None	None	2026-09-16 12:35:46 UTC
Red Hat Product Errata	RHSA-2026:68334	None	None	None	2026-09-16 17:20:22 UTC
Red Hat Product Errata	RHSA-2026:68504	None	None	None	2026-09-17 04:34:10 UTC
Red Hat Product Errata	RHSA-2026:68527	None	None	None	2026-09-17 06:32:22 UTC

Description OSIDB Bzimport 2026-05-07 20:01:14 UTC

Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.

Comment 2 errata-xmlrpc 2026-06-01 00:43:24 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:22120 https://access.redhat.com/errata/RHSA-2026:22120

Comment 3 errata-xmlrpc 2026-06-01 01:00:28 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:22121 https://access.redhat.com/errata/RHSA-2026:22121

Comment 4 errata-xmlrpc 2026-06-01 01:04:27 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:22112 https://access.redhat.com/errata/RHSA-2026:22112

Comment 5 errata-xmlrpc 2026-08-03 15:58:49 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:49702 https://access.redhat.com/errata/RHSA-2026:49702

Comment 6 errata-xmlrpc 2026-08-03 17:33:27 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:49712 https://access.redhat.com/errata/RHSA-2026:49712

Comment 8 errata-xmlrpc 2026-08-19 15:34:48 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.19

Via RHSA-2026:54552 https://access.redhat.com/errata/RHSA-2026:54552

Comment 9 errata-xmlrpc 2026-08-20 18:47:07 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:57649 https://access.redhat.com/errata/RHSA-2026:57649

Comment 10 errata-xmlrpc 2026-08-26 00:20:55 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.16

Via RHSA-2026:57845 https://access.redhat.com/errata/RHSA-2026:57845

Comment 11 errata-xmlrpc 2026-08-26 09:57:30 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.14

Via RHSA-2026:56785 https://access.redhat.com/errata/RHSA-2026:56785

Comment 12 errata-xmlrpc 2026-08-26 10:47:48 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.18

Via RHSA-2026:57914 https://access.redhat.com/errata/RHSA-2026:57914

Comment 13 errata-xmlrpc 2026-08-26 15:15:50 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.18

Via RHSA-2026:57482 https://access.redhat.com/errata/RHSA-2026:57482

Comment 14 errata-xmlrpc 2026-08-26 15:17:58 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.16

Via RHSA-2026:56852 https://access.redhat.com/errata/RHSA-2026:56852

Comment 15 errata-xmlrpc 2026-08-26 15:35:39 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.15

Via RHSA-2026:56910 https://access.redhat.com/errata/RHSA-2026:56910

Comment 16 errata-xmlrpc 2026-08-31 04:07:42 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:61253 https://access.redhat.com/errata/RHSA-2026:61253

Comment 17 errata-xmlrpc 2026-09-02 06:46:05 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:62407 https://access.redhat.com/errata/RHSA-2026:62407

Comment 18 errata-xmlrpc 2026-09-02 07:09:58 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:62406 https://access.redhat.com/errata/RHSA-2026:62406

Comment 19 errata-xmlrpc 2026-09-02 16:39:18 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:62754 https://access.redhat.com/errata/RHSA-2026:62754

Comment 20 errata-xmlrpc 2026-09-02 16:55:42 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:62753 https://access.redhat.com/errata/RHSA-2026:62753

Comment 21 errata-xmlrpc 2026-09-02 19:13:24 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:62803 https://access.redhat.com/errata/RHSA-2026:62803

Comment 22 errata-xmlrpc 2026-09-03 05:31:16 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:63022 https://access.redhat.com/errata/RHSA-2026:63022

Comment 23 errata-xmlrpc 2026-09-03 09:05:53 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.17

Via RHSA-2026:60018 https://access.redhat.com/errata/RHSA-2026:60018

Comment 24 errata-xmlrpc 2026-09-03 12:17:02 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.12

Via RHSA-2026:59830 https://access.redhat.com/errata/RHSA-2026:59830

Comment 25 errata-xmlrpc 2026-09-04 00:43:22 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:63332 https://access.redhat.com/errata/RHSA-2026:63332

Comment 26 errata-xmlrpc 2026-09-04 00:59:48 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:63163 https://access.redhat.com/errata/RHSA-2026:63163

Comment 27 errata-xmlrpc 2026-09-08 04:39:06 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:64818 https://access.redhat.com/errata/RHSA-2026:64818

Comment 28 errata-xmlrpc 2026-09-08 08:02:06 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:65116 https://access.redhat.com/errata/RHSA-2026:65116

Comment 29 errata-xmlrpc 2026-09-08 10:05:57 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:65117 https://access.redhat.com/errata/RHSA-2026:65117

Comment 30 errata-xmlrpc 2026-09-08 10:44:31 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:65335 https://access.redhat.com/errata/RHSA-2026:65335

Comment 31 errata-xmlrpc 2026-09-08 11:15:07 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:65336 https://access.redhat.com/errata/RHSA-2026:65336

Comment 32 errata-xmlrpc 2026-09-08 11:45:47 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:65153 https://access.redhat.com/errata/RHSA-2026:65153

Comment 33 errata-xmlrpc 2026-09-08 17:06:15 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:65534 https://access.redhat.com/errata/RHSA-2026:65534

Comment 34 errata-xmlrpc 2026-09-09 00:32:15 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.19

Via RHSA-2026:63636 https://access.redhat.com/errata/RHSA-2026:63636

Comment 35 errata-xmlrpc 2026-09-09 10:39:28 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:65886 https://access.redhat.com/errata/RHSA-2026:65886

Comment 36 errata-xmlrpc 2026-09-09 10:49:31 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:65895 https://access.redhat.com/errata/RHSA-2026:65895

Comment 37 errata-xmlrpc 2026-09-10 05:34:02 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:66327 https://access.redhat.com/errata/RHSA-2026:66327

Comment 38 Jon Orris 2026-09-14 13:30:22 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:67148 https://access.redhat.com/errata/RHSA-2026:67148

Comment 39 Jon Orris 2026-09-15 09:24:01 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:67517 https://access.redhat.com/errata/RHSA-2026:67517

Comment 40 Jon Orris 2026-09-16 12:21:21 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:67974 https://access.redhat.com/errata/RHSA-2026:67974

Comment 41 Jon Orris 2026-09-16 12:35:39 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:67975 https://access.redhat.com/errata/RHSA-2026:67975

Comment 42 Jon Orris 2026-09-16 17:20:15 UTC

This issue has been addressed in the following products:

  RHEM 1.1 for RHEL 10
  RHEM 1.1 for RHEL 9

Via RHSA-2026:68334 https://access.redhat.com/errata/RHSA-2026:68334

Comment 43 Jon Orris 2026-09-17 04:34:03 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Via RHSA-2026:68504 https://access.redhat.com/errata/RHSA-2026:68504

Comment 44 Jon Orris 2026-09-17 06:32:16 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:68527 https://access.redhat.com/errata/RHSA-2026:68527

Comment 45 Jon Orris 2026-09-17 06:42:57 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.13

Via RHSA-2026:65838 https://access.redhat.com/errata/RHSA-2026:65838

Note You need to log in before you can comment on or make changes to this bug.

aazores
abarbaro
akhatavk
akoudelk
alcohan
alebedev
alizardo
amctagga
anjoseph
anpicker
ansmith
anthomas
aoconnor
aos-team-art-private
aruklets
asdas
bbrownin
bdettelb
bniver
ckandaga
cmah
crizzo
dakwon
dhanak
dkeler
doconnor
dpaolell
drosa
dschmidt
dsimansk
dymurray
eaguilar
ebaron
eborisov
eglynn
ehelms
erezende
fdeutsch
flucifre
gbenhaim
ggainey
gmeno
gparvin
groman
hasun
ibolton
jbalunas
jbritton
jcantril
jchui
jdelft
jfula
jhe
jjoyce
jkoehler
jlanda
jmatsuok
jmatthew
jmontleo
jolong
jowilson
jpasqual
jprabhak
jpretori
jschluet
jtolenti
jupierce
juwatts
kaycoth
kingland
kshier
ktsao
kverlaen
lball
lbragsta
lchilton
lgamliel
lgarciaa
lhh
lphiri
lwan
manissin
mbenjamin
mbiarnes
mburns
mdellweg
mgarciac
mhackett
mhulan
mnovotny
mwringe
nboldt
ngough
niyer
nmoumoul
nyancey
oaljalju
ometelka
oramraz
osousa
pahickey
pcreech
peholase
pgaikwad
pjindal
ppalepu
ppostler
prdhamdh
psrna
ptisnovs
pvasanth
rchan
rekumar
rfreiman
rhaigner
rhel-process-autobot
rjohnson
rojacob
sakbas
sausingh
sbratsla
sdawley
sfeifer
sghai
sidsharm
simaishi
slucidi
smallamp
smcdonal
smullick
sostapov
sseago
stcannon
stirabos
suppawar
syedriko
teagle
thason
tmalecek
twaugh
tzivkovi
vereddy
veshanka
vlaad
vvoronko
watson-tool-maintainers
wenshen
whayutin
wtam
xdharmai
xiyuan
yguenane