In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy (from net/http/httputil) result in a situation where an attacker is able to drop arbitrary headers.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade buildahUpgrade podman-dockerUpgrade podman-gvproxyUpgrade delveUpgrade grafanaUpgrade buildah-testsUpgrade podman-testsUpgrade podman-pluginsUpgrade podman-remoteUpgrade podman | May 4, 2022 | Aug 2, 2021 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade golang-srcUpgrade golang-miscUpgrade golangUpgrade golang-binUpgrade golang-testsUpgrade golang-docsUpgrade golang-raceUpgrade golang-shared | Sep 30, 2022 | Aug 2, 2021 |
| Amazon_linux | — | Upgrade golang | Sep 9, 2021 | Jun 28, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 2, 2021 |
| Centos_linux | — | Upgrade golang-docsUpgrade podman-plugins-debuginfoUpgrade podman-debugsourceUpgrade delve-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-dockerUpgrade podman-gvproxyUpgrade buildah-testsUpgrade podman-testsUpgrade delveUpgrade grafanaUpgrade go-toolsetUpgrade podman-pluginsUpgrade delve-debugsourceUpgrade golang-binUpgrade buildah-debugsourceUpgrade golang-srcUpgrade golang-miscUpgrade golangUpgrade buildahUpgrade golang-testsUpgrade buildah-tests-debuginfoUpgrade podman-debuginfoUpgrade podman-catatonit-debuginfoUpgrade grafana-debuginfoUpgrade podman-remoteUpgrade podman-remote-debuginfoUpgrade golang-raceUpgrade buildah-debuginfoUpgrade podman | Nov 10, 2021 | Aug 2, 2021 |
| Debian | — | Upgrade golang-1.15 | Jul 30, 2024 | Aug 2, 2021 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Jun 3, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Nov 12, 2021 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Nov 12, 2021 | Aug 2, 2021 |
| Oracle_linux | — | Upgrade buildahUpgrade podman-testsUpgrade podmanUpgrade podman-catatonitUpgrade podman-pluginsUpgrade grafanaUpgrade podman-remoteUpgrade podman-dockerUpgrade buildah-testsUpgrade podman-gvproxy | Nov 17, 2021 | May 21, 2021 |
| Redhat Openshift | — | Upgrade openshift-clientsUpgrade cri-oUpgrade butaneUpgrade cri-toolsUpgrade golang-github-prometheus-promuUpgrade ignitionUpgrade redhat-release-coreosUpgrade openshiftUpgrade windows-machine-config-rhel8-operatorUpgrade containernetworking-pluginsUpgrade atomic-openshift-service-idler | Aug 12, 2021 | May 21, 2021 |
| Redhat_linux | — | Upgrade podman-dockerUpgrade golang-raceUpgrade buildahUpgrade go-toolsetUpgrade podman-gvproxyUpgrade podman-gvproxy-debuginfoUpgrade podman-testsNo solution existsUpgrade grafana-debuginfoUpgrade golang-docsUpgrade buildah-debuginfoUpgrade buildah-testsUpgrade golangUpgrade buildah-tests-debuginfoUpgrade delve-debugsourceUpgrade podman-catatonit-debuginfoUpgrade podman-debuginfoUpgrade golang-testsUpgrade delveUpgrade podmanUpgrade podman-remoteUpgrade delve-debuginfoUpgrade grafanaUpgrade buildah-debugsourceUpgrade golang-binUpgrade podman-plugins-debuginfoUpgrade golang-miscUpgrade podman-debugsourceUpgrade podman-pluginsUpgrade podman-remote-debuginfoUpgrade golang-src | Nov 10, 2021 | Aug 2, 2021 |
| Rocky_linux | — | Upgrade delveUpgrade golang-raceUpgrade grafana-debuginfoUpgrade delve-debuginfoUpgrade delve-debugsourceUpgrade golang-binUpgrade golangUpgrade grafanaUpgrade go-toolset | Mar 12, 2024 | Aug 2, 2021 |
| Suse | — | Upgrade go1.16Upgrade go1.15-raceUpgrade go1.15-docUpgrade go1.16-raceUpgrade go1.15Upgrade go1.16-doc | Jul 1, 2021 | Jun 28, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub