In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy (from net/http/httputil) result in a situation where an attacker is able to drop arbitrary headers.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podmanUpgrade podman-remoteUpgrade podman-pluginsUpgrade grafanaUpgrade buildah-testsUpgrade podman-gvproxyUpgrade podman-dockerUpgrade delveUpgrade podman-testsUpgrade buildah | May 4, 2022 | Aug 2, 2021 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade golang-miscUpgrade golang-binUpgrade golangUpgrade golang-srcUpgrade golang-raceUpgrade golang-sharedUpgrade golang-docsUpgrade golang-tests | Sep 30, 2022 | Aug 2, 2021 |
| Amazon_linux | — | Upgrade golang | Sep 9, 2021 | Jun 28, 2021 |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Aug 2, 2021 | |
| Centos_linux | — | Upgrade golang-binUpgrade podmanUpgrade golangUpgrade golang-miscUpgrade buildahUpgrade golang-srcUpgrade buildah-debuginfoUpgrade podman-catatonit-debuginfoUpgrade buildah-debugsourceUpgrade buildah-tests-debuginfoUpgrade golang-testsUpgrade grafana-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-pluginsUpgrade delve-debugsourceUpgrade podman-debuginfoUpgrade podman-remoteUpgrade golang-raceUpgrade golang-docsUpgrade podman-plugins-debuginfoUpgrade delveUpgrade podman-dockerUpgrade podman-gvproxy-debuginfoUpgrade buildah-testsUpgrade podman-gvproxyUpgrade grafanaUpgrade podman-debugsourceUpgrade delve-debuginfoUpgrade podman-testsUpgrade go-toolset | Nov 10, 2021 | Aug 2, 2021 |
| Debian | — | Upgrade golang-1.15 | Jul 30, 2024 | Aug 2, 2021 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Jun 3, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Nov 12, 2021 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Nov 12, 2021 | Aug 2, 2021 |
| Oracle_linux | — | Upgrade buildahUpgrade podman-testsUpgrade podmanUpgrade podman-catatonitUpgrade podman-pluginsUpgrade grafanaUpgrade podman-gvproxyUpgrade buildah-testsUpgrade podman-remoteUpgrade podman-docker | Nov 17, 2021 | May 21, 2021 |
| Redhat Openshift | — | Upgrade atomic-openshift-service-idlerUpgrade containernetworking-pluginsUpgrade openshift4-wincw/windows-machine-config-rhel8-operatorUpgrade butaneUpgrade golang-github-prometheus-promuUpgrade openshiftUpgrade ignitionUpgrade redhat-release-coreosUpgrade cri-toolsUpgrade cri-oUpgrade openshift-clients | Aug 12, 2021 | Aug 2, 2021 |
| Redhat_linux | — | Upgrade podman-dockerNo solution existsUpgrade buildah-testsUpgrade podman-gvproxy-debuginfoUpgrade grafana-debuginfoUpgrade podman-testsUpgrade buildah-debuginfoUpgrade golang-raceUpgrade buildahUpgrade go-toolsetUpgrade golang-docsUpgrade podman-gvproxyUpgrade podman-debugsourceUpgrade podman-remote-debuginfoUpgrade delve-debugsourceUpgrade golangUpgrade delveUpgrade golang-miscUpgrade podman-plugins-debuginfoUpgrade buildah-debugsourceUpgrade golang-binUpgrade podman-remoteUpgrade podman-pluginsUpgrade podmanUpgrade golang-testsUpgrade podman-catatonit-debuginfoUpgrade buildah-tests-debuginfoUpgrade golang-srcUpgrade podman-debuginfoUpgrade grafanaUpgrade delve-debuginfo | Nov 10, 2021 | Aug 2, 2021 |
| Rocky_linux | rocky-upgrade-delverocky-upgrade-delve-debuginforocky-upgrade-delve-debugsourcerocky-upgrade-go-toolsetrocky-upgrade-golangrocky-upgrade-golang-binrocky-upgrade-golang-racerocky-upgrade-grafanarocky-upgrade-grafana-debuginfo | Mar 12, 2024 | Aug 2, 2021 | |
| Suse | — | suse-upgrade-go1-15suse-upgrade-go1-15-docsuse-upgrade-go1-15-racesuse-upgrade-go1-16suse-upgrade-go1-16-docsuse-upgrade-go1-16-race | Jul 1, 2021 | Jun 28, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub