In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy (from net/http/httputil) result in a situation where an attacker is able to drop arbitrary headers.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-gvproxyUpgrade podman-dockerUpgrade podman-testsUpgrade buildah-testsUpgrade grafanaUpgrade delveUpgrade buildahUpgrade podman-remoteUpgrade podmanUpgrade podman-plugins | May 4, 2022 | Aug 2, 2021 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade golang-docsUpgrade golang-raceUpgrade golang-testsUpgrade golang-sharedUpgrade golangUpgrade golang-srcUpgrade golang-binUpgrade golang-misc | Sep 30, 2022 | Aug 2, 2021 |
| Amazon_linux | — | Upgrade golang | Sep 9, 2021 | Jun 28, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 2, 2021 |
| Centos_linux | — | Upgrade golang-docsUpgrade podman-plugins-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-testsUpgrade delve-debuginfoUpgrade podman-dockerUpgrade buildah-testsUpgrade grafanaUpgrade podman-gvproxyUpgrade delveUpgrade podman-debugsourceUpgrade go-toolsetUpgrade podman-debuginfoUpgrade golang-srcUpgrade buildahUpgrade golang-miscUpgrade podmanUpgrade golang-binUpgrade buildah-debugsourceUpgrade delve-debugsourceUpgrade golangUpgrade podman-pluginsUpgrade golang-testsUpgrade buildah-tests-debuginfoUpgrade golang-raceUpgrade buildah-debuginfoUpgrade grafana-debuginfoUpgrade podman-remoteUpgrade podman-remote-debuginfoUpgrade podman-catatonit-debuginfo | Nov 10, 2021 | Aug 2, 2021 |
| Debian | — | Upgrade golang-1.15 | Jul 30, 2024 | Aug 2, 2021 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Jun 3, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Nov 12, 2021 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Nov 12, 2021 | Aug 2, 2021 |
| Oracle_linux | — | Upgrade podman-remoteUpgrade buildah-testsUpgrade podman-dockerUpgrade podman-gvproxyUpgrade grafanaUpgrade buildahUpgrade podman-catatonitUpgrade podman-pluginsUpgrade podman-testsUpgrade podman | Nov 17, 2021 | May 21, 2021 |
| Redhat Openshift | — | Upgrade butaneUpgrade cri-toolsUpgrade redhat-release-coreosUpgrade openshift-clientsUpgrade golang-github-prometheus-promuUpgrade cri-oUpgrade openshiftUpgrade ignitionUpgrade windows-machine-config-rhel8-operatorUpgrade atomic-openshift-service-idlerUpgrade containernetworking-plugins | Aug 12, 2021 | May 21, 2021 |
| Redhat_linux | — | Upgrade grafana-debuginfoUpgrade buildah-testsUpgrade podman-dockerUpgrade buildah-debuginfoUpgrade podman-testsNo solution existsUpgrade go-toolsetUpgrade podman-gvproxyUpgrade buildahUpgrade podman-gvproxy-debuginfoUpgrade golang-docsUpgrade golang-raceUpgrade delve-debuginfoUpgrade buildah-debugsourceUpgrade podman-debugsourceUpgrade golangUpgrade delveUpgrade podman-remote-debuginfoUpgrade golang-srcUpgrade delve-debugsourceUpgrade podman-catatonit-debuginfoUpgrade golang-binUpgrade buildah-tests-debuginfoUpgrade golang-miscUpgrade podman-pluginsUpgrade podman-plugins-debuginfoUpgrade podman-remoteUpgrade golang-testsUpgrade podmanUpgrade podman-debuginfoUpgrade grafana | Nov 10, 2021 | Aug 2, 2021 |
| Rocky_linux | — | Upgrade go-toolsetUpgrade grafanaUpgrade golangUpgrade delve-debuginfoUpgrade delveUpgrade delve-debugsourceUpgrade golang-raceUpgrade grafana-debuginfoUpgrade golang-bin | Mar 12, 2024 | Aug 2, 2021 |
| Suse | — | Upgrade go1.15-raceUpgrade go1.16Upgrade go1.15-docUpgrade go1.16-raceUpgrade go1.16-docUpgrade go1.15 | Jul 1, 2021 | Jun 28, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub