In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy (from net/http/httputil) result in a situation where an attacker is able to drop arbitrary headers.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-remoteUpgrade podmanUpgrade podman-pluginsUpgrade delveUpgrade podman-dockerUpgrade podman-testsUpgrade podman-gvproxyUpgrade buildah-testsUpgrade buildahUpgrade grafana | May 4, 2022 | Aug 2, 2021 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade golang-sharedUpgrade golang-docsUpgrade golang-raceUpgrade golang-testsUpgrade golangUpgrade golang-binUpgrade golang-miscUpgrade golang-src | Sep 30, 2022 | Aug 2, 2021 |
| Amazon_linux | — | Upgrade golang | Sep 9, 2021 | Jun 28, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 2, 2021 |
| Centos_linux | — | Upgrade golangUpgrade golang-miscUpgrade buildahUpgrade podman-catatonit-debuginfoUpgrade delve-debugsourceUpgrade golang-binUpgrade buildah-debugsourceUpgrade podman-pluginsUpgrade buildah-debuginfoUpgrade podman-remoteUpgrade grafana-debuginfoUpgrade golang-srcUpgrade podman-remote-debuginfoUpgrade golang-raceUpgrade podman-debuginfoUpgrade podmanUpgrade buildah-tests-debuginfoUpgrade golang-testsUpgrade podman-gvproxyUpgrade podman-dockerUpgrade golang-docsUpgrade go-toolsetUpgrade delveUpgrade buildah-testsUpgrade podman-debugsourceUpgrade grafanaUpgrade podman-testsUpgrade delve-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-plugins-debuginfo | Nov 10, 2021 | Aug 2, 2021 |
| Debian | — | Upgrade golang-1.15 | Jul 30, 2024 | Aug 2, 2021 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Jun 3, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Nov 12, 2021 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang | Nov 12, 2021 | Aug 2, 2021 |
| Oracle_linux | — | Upgrade podman-testsUpgrade buildahUpgrade podman-catatonitUpgrade podmanUpgrade podman-pluginsUpgrade podman-remoteUpgrade podman-dockerUpgrade buildah-testsUpgrade podman-gvproxyUpgrade grafana | Nov 17, 2021 | May 21, 2021 |
| Redhat Openshift | — | Upgrade openshift4-wincw/windows-machine-config-rhel8-operatorUpgrade atomic-openshift-service-idlerUpgrade containernetworking-pluginsUpgrade cri-toolsUpgrade openshift-clientsUpgrade cri-oUpgrade openshiftUpgrade golang-github-prometheus-promuUpgrade butaneUpgrade ignitionUpgrade redhat-release-coreos | Aug 12, 2021 | Aug 2, 2021 |
| Redhat_linux | — | Upgrade podman-gvproxy-debuginfoUpgrade podman-testsUpgrade buildahUpgrade golang-docsUpgrade go-toolsetNo solution existsUpgrade podman-gvproxyUpgrade buildah-debuginfoUpgrade buildah-testsUpgrade grafana-debuginfoUpgrade golang-raceUpgrade podman-dockerUpgrade golangUpgrade grafanaUpgrade podmanUpgrade podman-plugins-debuginfoUpgrade podman-remoteUpgrade delve-debugsourceUpgrade podman-pluginsUpgrade buildah-debugsourceUpgrade golang-srcUpgrade podman-catatonit-debuginfoUpgrade delve-debuginfoUpgrade golang-binUpgrade golang-miscUpgrade delveUpgrade podman-debugsourceUpgrade podman-debuginfoUpgrade podman-remote-debuginfoUpgrade buildah-tests-debuginfoUpgrade golang-tests | Nov 10, 2021 | Aug 2, 2021 |
| Rocky_linux | — | Upgrade golangUpgrade go-toolsetUpgrade grafanaUpgrade delve-debuginfoUpgrade delve-debugsourceUpgrade grafana-debuginfoUpgrade golang-binUpgrade golang-raceUpgrade delve | Mar 12, 2024 | Aug 2, 2021 |
| Suse | — | Upgrade go1.15Upgrade go1.16-docUpgrade go1.15-docUpgrade go1.16-raceUpgrade go1.15-raceUpgrade go1.16 | Jul 1, 2021 | Jun 28, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub