In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy (from net/http/httputil) result in a situation where an attacker is able to drop arbitrary headers.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade buildahUpgrade buildah-testsUpgrade grafanaUpgrade delveUpgrade podman-testsUpgrade podman-gvproxyUpgrade podman-dockerUpgrade podman-remoteUpgrade podman-pluginsUpgrade podman | May 4, 2022 | Aug 2, 2021 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade golang-raceUpgrade golang-docsUpgrade golang-testsUpgrade golang-sharedUpgrade golang-binUpgrade golang-miscUpgrade golangUpgrade golang-src | Sep 30, 2022 | Aug 2, 2021 |
| Amazon_linux | — | Upgrade golang | Sep 9, 2021 | Jun 28, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 2, 2021 |
| Centos_linux | — | Upgrade golang-miscUpgrade podmanUpgrade golang-binUpgrade golang-srcUpgrade podman-remoteUpgrade grafana-debuginfoUpgrade buildah-debuginfoUpgrade golang-raceUpgrade golang-testsUpgrade delve-debugsourceUpgrade podman-pluginsUpgrade podman-remote-debuginfoUpgrade buildah-tests-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podman-debuginfoUpgrade buildah-debugsourceUpgrade buildahUpgrade golangUpgrade grafanaUpgrade delve-debuginfoUpgrade podman-dockerUpgrade podman-gvproxyUpgrade buildah-testsUpgrade go-toolsetUpgrade delveUpgrade podman-plugins-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-testsUpgrade golang-docsUpgrade podman-debugsource | Nov 10, 2021 | Aug 2, 2021 |
| Debian | — | Upgrade golang-1.15 | Jul 30, 2024 | Aug 2, 2021 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Jun 3, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Nov 12, 2021 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Nov 12, 2021 | Aug 2, 2021 |
| Oracle_linux | — | Upgrade podman-dockerUpgrade buildah-testsUpgrade podman-gvproxyUpgrade grafanaUpgrade podman-remoteUpgrade podmanUpgrade buildahUpgrade podman-testsUpgrade podman-pluginsUpgrade podman-catatonit | Nov 17, 2021 | May 21, 2021 |
| Redhat Openshift | — | Upgrade butaneUpgrade ignitionUpgrade golang-github-prometheus-promuUpgrade cri-toolsUpgrade openshift-clientsUpgrade redhat-release-coreosUpgrade cri-oUpgrade openshiftUpgrade containernetworking-pluginsUpgrade windows-machine-config-rhel8-operatorUpgrade atomic-openshift-service-idler | Aug 12, 2021 | May 21, 2021 |
| Redhat_linux | — | Upgrade podman-debuginfoUpgrade golang-srcUpgrade delve-debugsourceUpgrade golang-miscUpgrade podman-debugsourceUpgrade podman-catatonit-debuginfoUpgrade golangUpgrade podman-remoteUpgrade podman-pluginsUpgrade podman-plugins-debuginfoUpgrade golang-testsUpgrade buildah-debugsourceUpgrade buildah-tests-debuginfoUpgrade podmanUpgrade podman-remote-debuginfoUpgrade grafanaUpgrade delveUpgrade golang-binUpgrade delve-debuginfoUpgrade go-toolsetUpgrade podman-dockerUpgrade buildah-testsUpgrade golang-raceNo solution existsUpgrade podman-testsUpgrade podman-gvproxy-debuginfoUpgrade buildahUpgrade buildah-debuginfoUpgrade grafana-debuginfoUpgrade golang-docsUpgrade podman-gvproxy | Nov 10, 2021 | Aug 2, 2021 |
| Rocky_linux | — | Upgrade golang-raceUpgrade delveUpgrade delve-debuginfoUpgrade delve-debugsourceUpgrade grafana-debuginfoUpgrade golang-binUpgrade golangUpgrade go-toolsetUpgrade grafana | Mar 12, 2024 | Aug 2, 2021 |
| Suse | — | Upgrade go1.15-raceUpgrade go1.16Upgrade go1.16-raceUpgrade go1.15-docUpgrade go1.16-docUpgrade go1.15 | Jul 1, 2021 | Jun 28, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub