Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go 1.18.4 allows HTTP request smuggling if combined with an intermediate server that also improperly fails to reject the header as invalid.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-aardvark-dnsalma-upgrade-buildahalma-upgrade-buildah-testsalma-upgrade-cockpit-podmanalma-upgrade-conmonalma-upgrade-container-selinuxalma-upgrade-containernetworking-pluginsalma-upgrade-containers-commonalma-upgrade-critalma-upgrade-criualma-upgrade-criu-develalma-upgrade-criu-libsalma-upgrade-crunalma-upgrade-delvealma-upgrade-fuse-overlayfsalma-upgrade-git-lfsalma-upgrade-go-toolsetalma-upgrade-golangalma-upgrade-golang-binalma-upgrade-golang-docsalma-upgrade-golang-miscalma-upgrade-golang-racealma-upgrade-golang-srcalma-upgrade-golang-testsalma-upgrade-grafanaalma-upgrade-grafana-pcpalma-upgrade-libslirpalma-upgrade-libslirp-develalma-upgrade-netavarkalma-upgrade-oci-seccomp-bpf-hookalma-upgrade-podmanalma-upgrade-podman-catatonitalma-upgrade-podman-dockeralma-upgrade-podman-gvproxyalma-upgrade-podman-pluginsalma-upgrade-podman-remotealma-upgrade-podman-testsalma-upgrade-python3-criualma-upgrade-python3-podmanalma-upgrade-runcalma-upgrade-skopeoalma-upgrade-skopeo-testsalma-upgrade-slirp4netnsalma-upgrade-toolboxalma-upgrade-toolbox-testsalma-upgrade-udica | Aug 8, 2022 | Aug 1, 2022 | |
| Alpine Linux | alpine-linux-upgrade-go | Aug 22, 2024 | Aug 9, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-go-filesystemamazon-linux-ami-2-upgrade-go-rpm-macrosamazon-linux-ami-2-upgrade-go-rpm-templatesamazon-linux-ami-2-upgrade-go-srpm-macrosamazon-linux-ami-2-upgrade-golangamazon-linux-ami-2-upgrade-golang-binamazon-linux-ami-2-upgrade-golang-docsamazon-linux-ami-2-upgrade-golang-github-godbus-dbus-develamazon-linux-ami-2-upgrade-golang-github-gorilla-context-develamazon-linux-ami-2-upgrade-golang-github-gorilla-mux-develamazon-linux-ami-2-upgrade-golang-github-kr-pty-develamazon-linux-ami-2-upgrade-golang-github-syndtr-gocapability-develamazon-linux-ami-2-upgrade-golang-googlecode-net-develamazon-linux-ami-2-upgrade-golang-googlecode-sqlite-develamazon-linux-ami-2-upgrade-golang-miscamazon-linux-ami-2-upgrade-golang-raceamazon-linux-ami-2-upgrade-golang-sharedamazon-linux-ami-2-upgrade-golang-srcamazon-linux-ami-2-upgrade-golang-testsamazon-linux-ami-2-upgrade-golistamazon-linux-ami-2-upgrade-golist-debuginfoamazon-linux-ami-2-upgrade-runcamazon-linux-ami-2-upgrade-runc-debuginfo | Oct 11, 2022 | Aug 10, 2022 | |
| Amazon_linux | — | amazon-linux-upgrade-golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-compat-golang-github-cpuguy83-md2man-2-develamazon-linux-2023-upgrade-golangamazon-linux-2023-upgrade-golang-binamazon-linux-2023-upgrade-golang-docsamazon-linux-2023-upgrade-golang-github-cpuguy83-md2manamazon-linux-2023-upgrade-golang-github-cpuguy83-md2man-debuginfoamazon-linux-2023-upgrade-golang-github-cpuguy83-md2man-debugsourceamazon-linux-2023-upgrade-golang-github-cpuguy83-md2man-develamazon-linux-2023-upgrade-golang-miscamazon-linux-2023-upgrade-golang-raceamazon-linux-2023-upgrade-golang-sharedamazon-linux-2023-upgrade-golang-srcamazon-linux-2023-upgrade-golang-testsamazon-linux-2023-upgrade-golistamazon-linux-2023-upgrade-golist-debuginfoamazon-linux-2023-upgrade-golist-debugsource | Feb 17, 2025 | Jul 12, 2022 | |
| Centos_linux | — | centos-upgrade-aardvark-dnscentos-upgrade-buildahcentos-upgrade-buildah-debuginfocentos-upgrade-buildah-debugsourcecentos-upgrade-buildah-testscentos-upgrade-buildah-tests-debuginfocentos-upgrade-cockpit-podmancentos-upgrade-conmoncentos-upgrade-conmon-debuginfocentos-upgrade-conmon-debugsourcecentos-upgrade-container-selinuxcentos-upgrade-containernetworking-pluginscentos-upgrade-containernetworking-plugins-debuginfocentos-upgrade-containernetworking-plugins-debugsourcecentos-upgrade-containers-commoncentos-upgrade-critcentos-upgrade-criucentos-upgrade-criu-debuginfocentos-upgrade-criu-debugsourcecentos-upgrade-criu-develcentos-upgrade-criu-libscentos-upgrade-criu-libs-debuginfocentos-upgrade-cruncentos-upgrade-crun-debuginfocentos-upgrade-crun-debugsourcecentos-upgrade-delvecentos-upgrade-delve-debuginfocentos-upgrade-delve-debugsourcecentos-upgrade-fuse-overlayfscentos-upgrade-fuse-overlayfs-debuginfocentos-upgrade-fuse-overlayfs-debugsourcecentos-upgrade-git-lfscentos-upgrade-git-lfs-debuginfocentos-upgrade-git-lfs-debugsourcecentos-upgrade-go-toolsetcentos-upgrade-golangcentos-upgrade-golang-bincentos-upgrade-golang-docscentos-upgrade-golang-misccentos-upgrade-golang-racecentos-upgrade-golang-srccentos-upgrade-golang-testscentos-upgrade-grafanacentos-upgrade-grafana-debuginfocentos-upgrade-grafana-pcpcentos-upgrade-grafana-pcp-debuginfocentos-upgrade-libslirpcentos-upgrade-libslirp-debuginfocentos-upgrade-libslirp-debugsourcecentos-upgrade-libslirp-develcentos-upgrade-netavarkcentos-upgrade-oci-seccomp-bpf-hookcentos-upgrade-oci-seccomp-bpf-hook-debuginfocentos-upgrade-oci-seccomp-bpf-hook-debugsourcecentos-upgrade-podmancentos-upgrade-podman-catatonitcentos-upgrade-podman-catatonit-debuginfocentos-upgrade-podman-debuginfocentos-upgrade-podman-debugsourcecentos-upgrade-podman-dockercentos-upgrade-podman-gvproxycentos-upgrade-podman-gvproxy-debuginfocentos-upgrade-podman-pluginscentos-upgrade-podman-plugins-debuginfocentos-upgrade-podman-remotecentos-upgrade-podman-remote-debuginfocentos-upgrade-podman-testscentos-upgrade-python3-criucentos-upgrade-python3-podmancentos-upgrade-runccentos-upgrade-runc-debuginfocentos-upgrade-runc-debugsourcecentos-upgrade-skopeocentos-upgrade-skopeo-debuginfocentos-upgrade-skopeo-debugsourcecentos-upgrade-skopeo-testscentos-upgrade-slirp4netnscentos-upgrade-slirp4netns-debuginfocentos-upgrade-slirp4netns-debugsourcecentos-upgrade-toolboxcentos-upgrade-toolbox-debuginfocentos-upgrade-toolbox-debugsourcecentos-upgrade-toolbox-testscentos-upgrade-udica | Aug 2, 2022 | Aug 1, 2022 |
| Debian | debian-upgrade-golang-1-19 | Jul 30, 2024 | Aug 10, 2022 | |
| Freebsd | freebsd-upgrade-package-go118freebsd-upgrade-package-go117 | Nov 4, 2022 | Jul 13, 2022 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-lang-go | Aug 5, 2022 | Aug 4, 2022 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-golanghuawei-euleros-2_0_sp10-upgrade-golang-develhuawei-euleros-2_0_sp10-upgrade-golang-help | Nov 3, 2022 | Aug 10, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-aardvark-dnsoracle-linux-upgrade-buildahoracle-linux-upgrade-buildah-testsoracle-linux-upgrade-cockpit-podmanoracle-linux-upgrade-conmonoracle-linux-upgrade-containernetworking-pluginsoracle-linux-upgrade-containers-commonoracle-linux-upgrade-container-selinuxoracle-linux-upgrade-critoracle-linux-upgrade-criuoracle-linux-upgrade-criu-develoracle-linux-upgrade-criu-libsoracle-linux-upgrade-crunoracle-linux-upgrade-delveoracle-linux-upgrade-fuse-overlayfsoracle-linux-upgrade-git-lfsoracle-linux-upgrade-golangoracle-linux-upgrade-golang-binoracle-linux-upgrade-golang-docsoracle-linux-upgrade-golang-miscoracle-linux-upgrade-golang-raceoracle-linux-upgrade-golang-srcoracle-linux-upgrade-golang-testsoracle-linux-upgrade-go-toolsetoracle-linux-upgrade-grafanaoracle-linux-upgrade-grafana-pcporacle-linux-upgrade-libslirporacle-linux-upgrade-libslirp-develoracle-linux-upgrade-netavarkoracle-linux-upgrade-oci-seccomp-bpf-hookoracle-linux-upgrade-podmanoracle-linux-upgrade-podman-catatonitoracle-linux-upgrade-podman-dockeroracle-linux-upgrade-podman-gvproxyoracle-linux-upgrade-podman-pluginsoracle-linux-upgrade-podman-remoteoracle-linux-upgrade-podman-testsoracle-linux-upgrade-python3-criuoracle-linux-upgrade-python3-podmanoracle-linux-upgrade-runcoracle-linux-upgrade-skopeooracle-linux-upgrade-skopeo-testsoracle-linux-upgrade-slirp4netnsoracle-linux-upgrade-udica | Aug 4, 2022 | Jul 12, 2022 |
| Redhat Openshift | linuxrpm-upgrade-butanelinuxrpm-upgrade-ignitionlinuxrpm-upgrade-libsodiumlinuxrpm-upgrade-openstack-ironiclinuxrpm-upgrade-openstack-ironic-inspectorlinuxrpm-upgrade-openstack-ironic-python-agentlinuxrpm-upgrade-pyparsinglinuxrpm-upgrade-pysnmplinuxrpm-upgrade-python-alembiclinuxrpm-upgrade-python-amqplinuxrpm-upgrade-python-appdirslinuxrpm-upgrade-python-automatonlinuxrpm-upgrade-python-bcryptlinuxrpm-upgrade-python-beautifulsoup4linuxrpm-upgrade-python-cachetoolslinuxrpm-upgrade-python-cinderclientlinuxrpm-upgrade-python-clifflinuxrpm-upgrade-python-coloramalinuxrpm-upgrade-python-constructlinuxrpm-upgrade-python-dataclasseslinuxrpm-upgrade-python-debtcollectorlinuxrpm-upgrade-python-decoratorlinuxrpm-upgrade-python-dogpile-cachelinuxrpm-upgrade-python-dracclientlinuxrpm-upgrade-python-editorlinuxrpm-upgrade-python-fastenerslinuxrpm-upgrade-python-flasklinuxrpm-upgrade-python-funcsigslinuxrpm-upgrade-python-futuristlinuxrpm-upgrade-python-glanceclientlinuxrpm-upgrade-python-greenletlinuxrpm-upgrade-python-hardwarelinuxrpm-upgrade-python-ifaddrlinuxrpm-upgrade-python-importlib-metadatalinuxrpm-upgrade-python-ironic-liblinuxrpm-upgrade-python-ironic-prometheus-exporterlinuxrpm-upgrade-python-iso8601linuxrpm-upgrade-python-jsonpath-rwlinuxrpm-upgrade-python-jsonschemalinuxrpm-upgrade-python-kazoolinuxrpm-upgrade-python-keyringlinuxrpm-upgrade-python-keystoneauth1linuxrpm-upgrade-python-keystoneclientlinuxrpm-upgrade-python-keystonemiddlewarelinuxrpm-upgrade-python-kombulinuxrpm-upgrade-python-logutilslinuxrpm-upgrade-python-memcachedlinuxrpm-upgrade-python-migratelinuxrpm-upgrade-python-msgpacklinuxrpm-upgrade-python-munchlinuxrpm-upgrade-python-openstacksdklinuxrpm-upgrade-python-os-service-typeslinuxrpm-upgrade-python-os-traitslinuxrpm-upgrade-python-osc-liblinuxrpm-upgrade-python-oslo-cachelinuxrpm-upgrade-python-oslo-concurrencylinuxrpm-upgrade-python-oslo-configlinuxrpm-upgrade-python-oslo-contextlinuxrpm-upgrade-python-oslo-dblinuxrpm-upgrade-python-oslo-i18nlinuxrpm-upgrade-python-oslo-loglinuxrpm-upgrade-python-oslo-messaginglinuxrpm-upgrade-python-oslo-metricslinuxrpm-upgrade-python-oslo-middlewarelinuxrpm-upgrade-python-oslo-policylinuxrpm-upgrade-python-oslo-rootwraplinuxrpm-upgrade-python-oslo-serializationlinuxrpm-upgrade-python-oslo-servicelinuxrpm-upgrade-python-oslo-upgradechecklinuxrpm-upgrade-python-oslo-utilslinuxrpm-upgrade-python-oslo-versionedobjectslinuxrpm-upgrade-python-osprofilerlinuxrpm-upgrade-python-packaginglinuxrpm-upgrade-python-pastelinuxrpm-upgrade-python-paste-deploylinuxrpm-upgrade-python-pbrlinuxrpm-upgrade-python-pecanlinuxrpm-upgrade-python-pexpectlinuxrpm-upgrade-python-pintlinuxrpm-upgrade-python-proliantutilslinuxrpm-upgrade-python-prometheus_clientlinuxrpm-upgrade-python-pycadflinuxrpm-upgrade-python-pycdliblinuxrpm-upgrade-python-pynacllinuxrpm-upgrade-python-pypercliplinuxrpm-upgrade-python-pyrsistentlinuxrpm-upgrade-python-redislinuxrpm-upgrade-python-repoze-lrulinuxrpm-upgrade-python-requestsexceptionslinuxrpm-upgrade-python-retryinglinuxrpm-upgrade-python-rfc3986linuxrpm-upgrade-python-routeslinuxrpm-upgrade-python-scciclientlinuxrpm-upgrade-python-secretstoragelinuxrpm-upgrade-python-simplegenericlinuxrpm-upgrade-python-simplejsonlinuxrpm-upgrade-python-singledispatchlinuxrpm-upgrade-python-sixlinuxrpm-upgrade-python-soupsievelinuxrpm-upgrade-python-sqlparselinuxrpm-upgrade-python-statsdlinuxrpm-upgrade-python-stevedorelinuxrpm-upgrade-python-sushylinuxrpm-upgrade-python-sushy-oem-idraclinuxrpm-upgrade-python-swiftclientlinuxrpm-upgrade-python-tempitalinuxrpm-upgrade-python-tenacitylinuxrpm-upgrade-python-toozlinuxrpm-upgrade-python-vinelinuxrpm-upgrade-python-voluptuouslinuxrpm-upgrade-python-waitresslinuxrpm-upgrade-python-warlocklinuxrpm-upgrade-python-wcwidthlinuxrpm-upgrade-python-weboblinuxrpm-upgrade-python-webtestlinuxrpm-upgrade-python-werkzeuglinuxrpm-upgrade-python-wraptlinuxrpm-upgrade-python-wsmelinuxrpm-upgrade-python-yappilinuxrpm-upgrade-python-zakelinuxrpm-upgrade-python-zeroconflinuxrpm-upgrade-python-zipp | Nov 29, 2022 | Aug 10, 2022 | |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-aardvark-dnsredhat-upgrade-buildahredhat-upgrade-buildah-debuginforedhat-upgrade-buildah-debugsourceredhat-upgrade-buildah-testsredhat-upgrade-buildah-tests-debuginforedhat-upgrade-cockpit-podmanredhat-upgrade-conmonredhat-upgrade-conmon-debuginforedhat-upgrade-conmon-debugsourceredhat-upgrade-container-selinuxredhat-upgrade-containernetworking-pluginsredhat-upgrade-containernetworking-plugins-debuginforedhat-upgrade-containernetworking-plugins-debugsourceredhat-upgrade-containers-commonredhat-upgrade-critredhat-upgrade-criuredhat-upgrade-criu-debuginforedhat-upgrade-criu-debugsourceredhat-upgrade-criu-develredhat-upgrade-criu-libsredhat-upgrade-criu-libs-debuginforedhat-upgrade-crunredhat-upgrade-crun-debuginforedhat-upgrade-crun-debugsourceredhat-upgrade-delveredhat-upgrade-delve-debuginforedhat-upgrade-delve-debugsourceredhat-upgrade-fuse-overlayfsredhat-upgrade-fuse-overlayfs-debuginforedhat-upgrade-fuse-overlayfs-debugsourceredhat-upgrade-git-lfsredhat-upgrade-git-lfs-debuginforedhat-upgrade-git-lfs-debugsourceredhat-upgrade-go-toolsetredhat-upgrade-golangredhat-upgrade-golang-binredhat-upgrade-golang-docsredhat-upgrade-golang-miscredhat-upgrade-golang-raceredhat-upgrade-golang-srcredhat-upgrade-golang-testsredhat-upgrade-grafanaredhat-upgrade-grafana-debuginforedhat-upgrade-grafana-pcpredhat-upgrade-grafana-pcp-debuginforedhat-upgrade-libslirpredhat-upgrade-libslirp-debuginforedhat-upgrade-libslirp-debugsourceredhat-upgrade-libslirp-develredhat-upgrade-netavarkredhat-upgrade-oci-seccomp-bpf-hookredhat-upgrade-oci-seccomp-bpf-hook-debuginforedhat-upgrade-oci-seccomp-bpf-hook-debugsourceredhat-upgrade-podmanredhat-upgrade-podman-catatonitredhat-upgrade-podman-catatonit-debuginforedhat-upgrade-podman-debuginforedhat-upgrade-podman-debugsourceredhat-upgrade-podman-dockerredhat-upgrade-podman-gvproxyredhat-upgrade-podman-gvproxy-debuginforedhat-upgrade-podman-pluginsredhat-upgrade-podman-plugins-debuginforedhat-upgrade-podman-remoteredhat-upgrade-podman-remote-debuginforedhat-upgrade-podman-testsredhat-upgrade-python3-criuredhat-upgrade-python3-podmanredhat-upgrade-runcredhat-upgrade-runc-debuginforedhat-upgrade-runc-debugsourceredhat-upgrade-skopeoredhat-upgrade-skopeo-debuginforedhat-upgrade-skopeo-debugsourceredhat-upgrade-skopeo-testsredhat-upgrade-slirp4netnsredhat-upgrade-slirp4netns-debuginforedhat-upgrade-slirp4netns-debugsourceredhat-upgrade-toolboxredhat-upgrade-toolbox-debuginforedhat-upgrade-toolbox-debugsourceredhat-upgrade-toolbox-testsredhat-upgrade-udica | Aug 3, 2022 | Aug 1, 2022 | |
| Rocky_linux | rocky-upgrade-buildahrocky-upgrade-buildah-debuginforocky-upgrade-buildah-debugsourcerocky-upgrade-buildah-testsrocky-upgrade-buildah-tests-debuginforocky-upgrade-conmonrocky-upgrade-conmon-debuginforocky-upgrade-conmon-debugsourcerocky-upgrade-containernetworking-pluginsrocky-upgrade-containernetworking-plugins-debuginforocky-upgrade-containernetworking-plugins-debugsourcerocky-upgrade-containers-commonrocky-upgrade-critrocky-upgrade-criurocky-upgrade-criu-debuginforocky-upgrade-criu-debugsourcerocky-upgrade-criu-develrocky-upgrade-criu-libsrocky-upgrade-criu-libs-debuginforocky-upgrade-crunrocky-upgrade-crun-debuginforocky-upgrade-crun-debugsourcerocky-upgrade-delverocky-upgrade-delve-debuginforocky-upgrade-delve-debugsourcerocky-upgrade-fuse-overlayfsrocky-upgrade-fuse-overlayfs-debuginforocky-upgrade-fuse-overlayfs-debugsourcerocky-upgrade-git-lfsrocky-upgrade-git-lfs-debuginforocky-upgrade-git-lfs-debugsourcerocky-upgrade-go-toolsetrocky-upgrade-golangrocky-upgrade-golang-binrocky-upgrade-golang-racerocky-upgrade-grafanarocky-upgrade-grafana-debuginforocky-upgrade-grafana-pcprocky-upgrade-grafana-pcp-debuginforocky-upgrade-libslirprocky-upgrade-libslirp-debuginforocky-upgrade-libslirp-debugsourcerocky-upgrade-libslirp-develrocky-upgrade-oci-seccomp-bpf-hookrocky-upgrade-oci-seccomp-bpf-hook-debuginforocky-upgrade-oci-seccomp-bpf-hook-debugsourcerocky-upgrade-podmanrocky-upgrade-podman-catatonitrocky-upgrade-podman-catatonit-debuginforocky-upgrade-podman-debuginforocky-upgrade-podman-debugsourcerocky-upgrade-podman-pluginsrocky-upgrade-podman-plugins-debuginforocky-upgrade-podman-remoterocky-upgrade-podman-remote-debuginforocky-upgrade-podman-testsrocky-upgrade-python3-criurocky-upgrade-runcrocky-upgrade-runc-debuginforocky-upgrade-runc-debugsourcerocky-upgrade-skopeorocky-upgrade-skopeo-debuginforocky-upgrade-skopeo-debugsourcerocky-upgrade-skopeo-testsrocky-upgrade-slirp4netnsrocky-upgrade-slirp4netns-debuginforocky-upgrade-slirp4netns-debugsourcerocky-upgrade-toolboxrocky-upgrade-toolbox-debuginforocky-upgrade-toolbox-debugsourcerocky-upgrade-toolbox-tests | Mar 12, 2024 | Aug 10, 2022 | |
| Splunk | splunk-upgrade-latest | Sep 30, 2025 | Aug 9, 2022 | |
| Suse | — | suse-upgrade-go1-17suse-upgrade-go1-17-docsuse-upgrade-go1-17-racesuse-upgrade-go1-18suse-upgrade-go1-18-docsuse-upgrade-go1-18-opensslsuse-upgrade-go1-18-openssl-docsuse-upgrade-go1-18-openssl-racesuse-upgrade-go1-18-race | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | ubuntu-pro-upgrade-golang-1-13ubuntu-pro-upgrade-golang-1-13-goubuntu-pro-upgrade-golang-1-13-srcubuntu-pro-upgrade-golang-1-16ubuntu-pro-upgrade-golang-1-16-goubuntu-pro-upgrade-golang-1-16-srcubuntu-upgrade-golang-1-13ubuntu-upgrade-golang-1-13-goubuntu-upgrade-golang-1-13-srcubuntu-upgrade-golang-1-16ubuntu-upgrade-golang-1-16-goubuntu-upgrade-golang-1-16-srcubuntu-upgrade-golang-1-18ubuntu-upgrade-golang-1-18-goubuntu-upgrade-golang-1-18-src | May 1, 2023 | Aug 10, 2022 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub