During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers.

The version of python3 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-1795 advisory.

  - During an address list folding when a separating comma ends up on a folded line and that line is to be     unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the     separating comma remains a plan comma. This can result in the address header being misinterpreted by some     mail servers. (CVE-2025-1795)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-917 advisory.

    During an address list folding when a separating comma ends up on a folded line and that line is to be     unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the     separating comma remains a plan comma. This can result in the address header being misinterpreted by some     mail servers. (CVE-2025-1795)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of python3 installed on the remote host is prior to 3.7.16-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2808 advisory.

    During an address list folding when a separating comma ends up on a folded line and that line is to be     unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the     separating comma remains a plan comma. This can result in the address header being misinterpreted by some     mail servers. (CVE-2025-1795)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-871 advisory.

    A vulnerability has been found in the CPython `venv` module and CLI where path names provided when     creating a virtual environment were not quoted properly, allowing the creator to inject commands into     virtual environment activation scripts (ie source venv/bin/activate). This means that attacker-     controlled virtual environments are able to run commands when the virtual environment is activated.
    Virtual environments which are not created by an attacker or which aren't activated before being used (ie     ./venv/bin/python) are not affected. (CVE-2024-9287)

    The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that     included square brackets which isn't valid according to RFC 3986. Square brackets are only meant to be     used as delimiters for specifying IPv6 and IPvFuture hosts in URLs. This could result in differential     parsing across the Python URL parser and other specification-compliant URL parsers. (CVE-2025-0938)

    During an address list folding when a separating comma ends up on a folded line and that line is to be     unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the     separating comma remains a plan comma. This can result in the address header being misinterpreted by some     mail servers. (CVE-2025-1795)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0982-1 advisory.

    - CVE-2025-1795: Fixed mishandling of comma during folding and unicode-encoding of email headers     (bsc#1238450).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0981-1 advisory.

    - CVE-2025-1795: Fixed mishandling of comma during folding and unicode-encoding of email headers     (bsc#1238450).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0883-1 advisory.

    - CVE-2025-1795: Fixed mishandling of comma during folding and unicode-encoding of email headers     (bsc#1238450).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4087 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4087-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                         Sean Whitton     March 20, 2025                                https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : python3.9     Version        : 3.9.2-1+deb11u3     CVE ID         : CVE-2022-0391 CVE-2025-0938 CVE-2025-1795

    Multiple vulnerabilities were discovered in modules shipped with     cpython 3.9, the primary interpreter for the Python programming     language.

    CVE-2022-0391

        Functions in the urllib.parse module did not sanitize URLs to remove         newline characters, which could lead to injection attacks.

    CVE-2025-0938

        Functions in the urllib.parse and urlparse modules accepted domain         names containing square brackets, which isn't valid.  These         delimiters are only permitted for IPv6 and IPvFuture hosts.  This         problem could result in differential parsing between the Python URL         parser and other specification-compliant URL parsers.

    CVE-2025-1795

        The implementations of e-mail header parsing and folding would         encode the comma used to separate list items, which could cause         receiving applications to interpret two items in the list as though         they were one item.

    For Debian 11 bullseye, these problems have been fixed in version     3.9.2-1+deb11u3.

    We recommend that you upgrade your python3.9 packages.

    For the detailed security status of python3.9 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/python3.9

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - During an address list folding when a separating comma ends up on a folded line and that line is to be     unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the     separating comma remains a plan comma. This can result in the address header being misinterpreted by some     mail servers. (CVE-2025-1795)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
234295	CBL Mariner 2.0 Security Update: python3 (CVE-2025-1795)	Nessus	MarinerOS Local Security Checks	low
233704	Amazon Linux 2023 : python3, python3-devel, python3-idle (ALAS2023-2025-917)	Nessus	Amazon Linux Local Security Checks	low
233693	Amazon Linux 2 : python3 (ALAS-2025-2808)	Nessus	Amazon Linux Local Security Checks	low
233393	Amazon Linux 2023 : python3.11, python3.11-devel, python3.11-idle (ALAS2023-2025-871)	Nessus	Amazon Linux Local Security Checks	medium
233211	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python311 (SUSE-SU-2025:0982-1)	Nessus	SuSE Local Security Checks	low
233206	SUSE SLES15 Security Update : python311 (SUSE-SU-2025:0981-1)	Nessus	SuSE Local Security Checks	low
233001	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python312 (SUSE-SU-2025:0883-1)	Nessus	SuSE Local Security Checks	low
232991	Debian dla-4087 : idle-python3.9 - security update	Nessus	Debian Local Security Checks	medium
232012	Linux Distros Unpatched Vulnerability : CVE-2025-1795	Nessus	Misc.	low

Detections

Analytics

CVE-2025-1795

low

Tenable Plugins

low

low

low

medium

low

low

low

medium

low