Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go 1.18.4 allows HTTP request smuggling if combined with an intermediate server that also improperly fails to reject the header as invalid.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade toolbox-testsUpgrade cockpit-podmanUpgrade podman-catatonitUpgrade buildah-testsUpgrade podman-dockerUpgrade skopeoUpgrade podmanUpgrade podman-testsUpgrade containernetworking-pluginsUpgrade criuUpgrade golang-binUpgrade critUpgrade crunUpgrade podman-pluginsUpgrade fuse-overlayfsUpgrade python3-criuUpgrade podman-remoteUpgrade golang-testsUpgrade runcUpgrade container-selinuxUpgrade buildahUpgrade golang-docsUpgrade udicaUpgrade delveUpgrade golang-raceUpgrade go-toolsetUpgrade toolboxUpgrade grafana-pcpUpgrade libslirp-develUpgrade libslirpUpgrade grafanaUpgrade netavarkUpgrade aardvark-dnsUpgrade git-lfsUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade podman-gvproxyUpgrade criu-libsUpgrade conmonUpgrade python3-podmanUpgrade golang-srcUpgrade criu-develUpgrade golang-miscUpgrade golangUpgrade skopeo-testsUpgrade slirp4netns | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-raceUpgrade go-rpm-templatesUpgrade golang-srcUpgrade golang-testsUpgrade golang-googlecode-sqlite-develUpgrade golang-github-gorilla-context-develUpgrade golang-miscUpgrade golistUpgrade golang-github-syndtr-gocapability-develUpgrade go-srpm-macrosUpgrade golangUpgrade golang-github-gorilla-mux-develUpgrade golang-docsUpgrade golist-debuginfoUpgrade go-rpm-macrosUpgrade golang-sharedUpgrade golang-github-godbus-dbus-develUpgrade go-filesystemUpgrade golang-binUpgrade golang-github-kr-pty-develUpgrade golang-googlecode-net-develUpgrade runc-debuginfoUpgrade runc | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golist-debuginfoUpgrade golang-sharedUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-binUpgrade golist-debugsourceUpgrade golang-docsUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golangUpgrade golistUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-srcUpgrade golang-github-cpuguy83-md2manUpgrade golang-miscUpgrade golang-raceUpgrade golang-testsUpgrade golang-github-cpuguy83-md2man-devel | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade buildahUpgrade cockpit-podmanUpgrade podman-pluginsUpgrade git-lfsUpgrade criuUpgrade golang-docsUpgrade grafana-debuginfoUpgrade go-toolsetUpgrade libslirpUpgrade skopeo-debuginfoUpgrade skopeo-debugsourceUpgrade fuse-overlayfsUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildah-testsUpgrade git-lfs-debugsourceUpgrade slirp4netns-debuginfoUpgrade conmonUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonitUpgrade criu-libs-debuginfoUpgrade crun-debuginfoUpgrade grafanaUpgrade podman-gvproxyUpgrade crunUpgrade conmon-debuginfoUpgrade podman-testsUpgrade libslirp-debugsourceUpgrade python3-podmanUpgrade toolbox-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade grafana-pcp-debuginfoUpgrade podman-dockerUpgrade toolbox-testsUpgrade udicaUpgrade golang-raceUpgrade netavarkUpgrade podman-debugsourceUpgrade toolboxUpgrade toolbox-debugsourceUpgrade runc-debuginfoUpgrade crun-debugsourceUpgrade buildah-tests-debuginfoUpgrade skopeo-testsUpgrade containers-commonUpgrade fuse-overlayfs-debugsourceUpgrade golangUpgrade libslirp-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade podman-debuginfoUpgrade podman-plugins-debuginfoUpgrade libslirp-develUpgrade criu-debuginfoUpgrade runcUpgrade criu-debugsourceUpgrade golang-binUpgrade python3-criuUpgrade podman-remoteUpgrade podman-gvproxy-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade criu-libsUpgrade critUpgrade conmon-debugsourceUpgrade golang-testsUpgrade golang-srcUpgrade criu-develUpgrade buildah-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade delve-debuginfoUpgrade buildah-debugsourceUpgrade golang-miscUpgrade git-lfs-debuginfoUpgrade delveUpgrade aardvark-dnsUpgrade skopeoUpgrade oci-seccomp-bpf-hookUpgrade podman-remote-debuginfoUpgrade grafana-pcpUpgrade delve-debugsourceUpgrade slirp4netns-debugsourceUpgrade runc-debugsource | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go117Upgrade go118 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Nov 3, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade criu-develUpgrade aardvark-dnsUpgrade udicaUpgrade golang-docsUpgrade runcUpgrade criuUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade skopeo-testsUpgrade golang-testsUpgrade container-selinuxUpgrade podman-catatonitUpgrade grafana-pcpUpgrade buildah-testsUpgrade golang-binUpgrade skopeoUpgrade critUpgrade podmanUpgrade python3-criuUpgrade delveUpgrade buildahUpgrade grafanaUpgrade git-lfsUpgrade go-toolsetUpgrade crunUpgrade containers-commonUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade golang-srcUpgrade libslirp-develUpgrade fuse-overlayfsUpgrade golang-raceUpgrade podman-dockerUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hookUpgrade python3-podmanUpgrade golang-miscUpgrade golangUpgrade conmonUpgrade podman-gvproxyUpgrade netavarkUpgrade podman-testsUpgrade libslirpUpgrade criu-libs | Aug 4, 2022 | Jul 12, 2022 |
| Redhat Openshift | — | Upgrade python-oslo-logUpgrade python-tempitaUpgrade python-wraptUpgrade python-oslo-dbUpgrade python-soupsieveUpgrade python-constructUpgrade python-hardwareUpgrade python-packagingUpgrade containernetworking-pluginsUpgrade python-pyperclipUpgrade python-appdirsUpgrade criuUpgrade python-debtcollectorUpgrade python-oslo-concurrencyUpgrade python-wsmeUpgrade openshift-clientsUpgrade openshift-ansibleUpgrade containers-commonUpgrade python-dracclientUpgrade skopeoUpgrade python-swiftclientUpgrade python-oslo-utilsUpgrade openshift-kuryrUpgrade python-simplegenericUpgrade pysnmpUpgrade python-sqlparseUpgrade rust-bootupdUpgrade python-beautifulsoup4Upgrade python-logutilsUpgrade python-warlockUpgrade python-keyringUpgrade python-webtestUpgrade python-simplejsonUpgrade ignitionUpgrade python-toozUpgrade python-decoratorUpgrade python-sushyUpgrade runcUpgrade python-sixUpgrade python-oslo-cacheUpgrade python-oslo-configUpgrade openshiftUpgrade python-rfc3986Upgrade python-pycadfUpgrade python-osc-libUpgrade ovn22.03Upgrade python-cachetoolsUpgrade haproxyUpgrade python-jsonschemaUpgrade atomic-openshift-service-idlerUpgrade podmanUpgrade python-osprofilerUpgrade python-pexpectUpgrade python-glanceclientUpgrade fuse-overlayfsUpgrade python-requestsexceptionsUpgrade python-msgpackUpgrade python-voluptuousUpgrade python-coloramaUpgrade python-oslo-policyUpgrade python-retryingUpgrade python-keystoneauth1Upgrade python-flaskUpgrade butaneUpgrade python-ifaddrUpgrade python-greenletUpgrade python-zeroconfUpgrade python-vineUpgrade ovn22.06Upgrade python-oslo-i18nUpgrade rust-afterburnUpgrade python-zippUpgrade python-tenacityUpgrade python-singledispatchUpgrade python-prometheus_clientUpgrade toolboxUpgrade python-bcryptUpgrade python-fastenersUpgrade python-oslo-rootwrapUpgrade python-oslo-versionedobjectsUpgrade python-waitressUpgrade python-editorUpgrade python-dogpile-cacheUpgrade python-yappiUpgrade libslirpUpgrade openstack-ironic-python-agentUpgrade python-pynaclUpgrade python-jsonpath-rwUpgrade python-iso8601Upgrade python-kazooUpgrade conmonUpgrade python-repoze-lruUpgrade openstack-ironicUpgrade python-funcsigsUpgrade python-kombuUpgrade python-os-service-typesUpgrade python-oslo-serviceUpgrade libsodiumUpgrade python-sushy-oem-idracUpgrade openstack-ironic-inspectorUpgrade openvswitch2.17Upgrade python-webobUpgrade python-keystoneclientUpgrade python-memcachedUpgrade python-zakeUpgrade python-dataclassesUpgrade python-openstacksdkUpgrade python-scciclientUpgrade python-pasteUpgrade python-ironic-prometheus-exporterUpgrade python-redisUpgrade kata-containersUpgrade python-pintUpgrade python-pecanUpgrade python-pycdlibUpgrade python-SecretStorageUpgrade buildahUpgrade python-paste-deployUpgrade python-oslo-messagingUpgrade python-oslo-contextUpgrade python-statsdUpgrade python-wcwidthUpgrade python-stevedoreUpgrade python-munchUpgrade python-routesUpgrade container-selinuxUpgrade python-keystonemiddlewareUpgrade python-cliffUpgrade python-importlib-metadataUpgrade python-pyrsistentUpgrade python-os-traitsUpgrade python-oslo-serializationUpgrade python-automatonUpgrade cri-oUpgrade python-werkzeugUpgrade python-cinderclientUpgrade python-amqpUpgrade python-oslo-metricsUpgrade slirp4netnsUpgrade python-futuristUpgrade coreos-installerUpgrade python-migrateUpgrade cri-toolsUpgrade python-pbrUpgrade python-oslo-middlewareUpgrade python-alembicUpgrade crunUpgrade console-login-helper-messagesUpgrade python-oslo-upgradecheckUpgrade python-ironic-libUpgrade pyparsingUpgrade python-proliantutils | Nov 29, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade podman-remote-debuginfoUpgrade podmanUpgrade skopeo-debugsourceUpgrade podman-catatonitUpgrade golang-testsUpgrade skopeoUpgrade podman-remoteUpgrade grafana-pcpUpgrade aardvark-dnsUpgrade buildah-debugsourceUpgrade grafana-debuginfoUpgrade critUpgrade crun-debugsourceUpgrade podman-debuginfoNo solution existsUpgrade runcUpgrade fuse-overlayfsUpgrade netavarkUpgrade criu-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade udicaUpgrade toolboxUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade delve-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade podman-catatonit-debuginfoUpgrade python3-criuUpgrade criu-libs-debuginfoUpgrade golang-binUpgrade golang-docsUpgrade conmon-debugsourceUpgrade git-lfs-debuginfoUpgrade grafana-pcp-debuginfoUpgrade containernetworking-pluginsUpgrade podman-pluginsUpgrade buildahUpgrade libslirp-debuginfoUpgrade libslirp-debugsourceUpgrade toolbox-testsUpgrade toolbox-debuginfoUpgrade toolbox-debugsourceUpgrade criuUpgrade crunUpgrade buildah-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade criu-debuginfoUpgrade containers-commonUpgrade skopeo-testsUpgrade podman-plugins-debuginfoUpgrade runc-debugsourceUpgrade python3-podmanUpgrade criu-develUpgrade cockpit-podmanUpgrade libslirpUpgrade conmon-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade runc-debuginfoUpgrade go-toolsetUpgrade crun-debuginfoUpgrade podman-dockerUpgrade buildah-tests-debuginfoUpgrade golang-miscUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade slirp4netns-debugsourceUpgrade skopeo-debuginfoUpgrade buildah-testsUpgrade slirp4netns-debuginfoUpgrade libslirp-develUpgrade podman-gvproxyUpgrade conmonUpgrade golang-srcUpgrade git-lfsUpgrade golangUpgrade container-selinuxUpgrade criu-libsUpgrade grafanaUpgrade fuse-overlayfs-debugsourceUpgrade git-lfs-debugsourceUpgrade podman-debugsourceUpgrade delve-debuginfoUpgrade podman-testsUpgrade slirp4netnsUpgrade golang-raceUpgrade delveUpgrade oci-seccomp-bpf-hook | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade crun-debuginfoUpgrade toolbox-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podman-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-debugsourceUpgrade criu-develUpgrade git-lfsUpgrade crun-debugsourceUpgrade runcUpgrade toolboxUpgrade python3-criuUpgrade conmonUpgrade buildah-debugsourceUpgrade git-lfs-debugsourceUpgrade libslirp-develUpgrade skopeoUpgrade oci-seccomp-bpf-hookUpgrade grafanaUpgrade podman-catatonit-debuginfoUpgrade runc-debuginfoUpgrade podman-testsUpgrade podman-remote-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade criu-libs-debuginfoUpgrade delve-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirpUpgrade criu-libsUpgrade golang-raceUpgrade critUpgrade skopeo-testsUpgrade toolbox-debugsourceUpgrade podmanUpgrade slirp4netns-debugsourceUpgrade podman-debugsourceUpgrade podman-pluginsUpgrade delveUpgrade slirp4netns-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade containers-commonUpgrade libslirp-debuginfoUpgrade crunUpgrade buildah-debuginfoUpgrade criuUpgrade criu-debugsourceUpgrade grafana-pcp-debuginfoUpgrade grafana-pcpUpgrade fuse-overlayfsUpgrade criu-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade conmon-debugsourceUpgrade slirp4netnsUpgrade go-toolsetUpgrade golang-binUpgrade git-lfs-debuginfoUpgrade runc-debugsourceUpgrade buildahUpgrade grafana-debuginfoUpgrade skopeo-debugsourceUpgrade skopeo-debuginfoUpgrade buildah-tests-debuginfoUpgrade toolbox-testsUpgrade containernetworking-pluginsUpgrade buildah-testsUpgrade conmon-debuginfoUpgrade podman-remoteUpgrade golangUpgrade podman-catatonitUpgrade podman-debuginfoUpgrade delve-debuginfo | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.2.11 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-openssl-docUpgrade go1.18-docUpgrade go1.17-raceUpgrade go1.18-raceUpgrade go1.18-openssl-raceUpgrade go1.18-opensslUpgrade go1.17-docUpgrade go1.18Upgrade go1.17 | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.13-srcUpgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.13Upgrade golang-1.13-goUpgrade golang-1.18-srcUpgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.16-goUpgrade golang-1.16Upgrade golang-1.18Upgrade golang-1.16-srcUpgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.13-src (Ubuntu Pro) | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub