CVE-2025-1795

Aliases:UBUNTU-CVE-2025-1795DEBIAN-CVE-2025-1795CGA-2rr8-57p3-7qf3CGA-565c-8qr6-jq4vCGA-mw7f-r7jj-x59jCGA-xww8-mv77-768r
Advisory lineage Upstream: 0 Downstream: 15
Deferred
Published: 28 Feb 2025, 18:59
Last modified:31 Jul 2026, 14:03

Vulnerability Summary

Overall Risk (default)
minimal
9/100
CVSS Score
2.3 LOW
v4.0 (cve.org)
EPSS Score
0.61% LOW
1% probability +0.02%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

28 Feb 2025, 18:59
Published
Vulnerability first disclosed
31 Jul 2026, 14:03
Last Modified
Vulnerability information updated

Description

During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers.

CVSS Metrics

  • v4.0•LOW•Score: 2.3CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
  • v4.0•LOW•Score: 2.3CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS Trends

Current EPSS score: 0.61%• Percentile: 48%

Techniques & Countermeasures

  • CWE-116•Improper Encoding or Escaping of Output

    The product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.

Affected Systems

  • chainguard•python-3.10

    < 3.10.17-r0

  • chainguard•python-3.9

    < 3.9.25-r0

  • wolfi•python-3.10

    < 3.10.17-r0

  • debian•pypy3

    < 7.3.5+dfsg-2+deb11u5 | all | < 7.3.18+dfsg-1 | < 7.3.18+dfsg-1

  • debian•python3.11

    < 3.11.2-6+deb12u6

  • debian•python3.13

    < 3.13.0~b1-1 | < 3.13.0~b1-1

  • debian•python3.9

    < 3.9.2-1+deb11u3

  • ubuntu•python3.10

    < 3.10.12-1~22.04.10

  • ubuntu•python3.11

    < 3.11.0~rc1-1~22.04.1~esm4

  • ubuntu•python3.12

    < 3.12.3-1ubuntu0.6

  • ubuntu•python3.4

    all

  • ubuntu•python3.5

    all

  • ubuntu•python3.6

    < 3.6.9-1~18.04ubuntu1.13+esm5

  • ubuntu•python3.7

    < 3.7.5-2ubuntu1~18.04.2+esm6

  • ubuntu•python3.8

    < 3.8.0-3ubuntu1~18.04.2+esm5 | < 3.8.10-0ubuntu1~20.04.18+esm1

  • ubuntu•python3.9

    < 3.9.5-3ubuntu0~20.04.1+esm5

  • python software foundation•cpython

    < 3.10.17 | < 3.9.23 | ≥ 3.10.0, < 3.10.17 | ≥ 3.11.0, < 3.11.9 | ≥ 3.12.0, < 3.12.3 | ≥ 3.13.0a1, < 3.13.0a5

References (17)