In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy (from net/http/httputil) result in a situation where an attacker is able to drop arbitrary headers.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-pluginsUpgrade podman-remoteUpgrade podmanUpgrade buildahUpgrade grafanaUpgrade buildah-testsUpgrade podman-gvproxyUpgrade podman-testsUpgrade delveUpgrade podman-docker | May 4, 2022 | Aug 2, 2021 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade golang-testsUpgrade golang-docsUpgrade golang-raceUpgrade golang-sharedUpgrade golangUpgrade golang-miscUpgrade golang-srcUpgrade golang-bin | Sep 30, 2022 | Aug 2, 2021 |
| Amazon_linux | — | Upgrade golang | Sep 9, 2021 | Jun 28, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 2, 2021 |
| Centos_linux | — | Upgrade podman-gvproxyUpgrade podman-dockerUpgrade podman-gvproxy-debuginfoUpgrade podman-testsUpgrade golang-docsUpgrade delve-debuginfoUpgrade podman-debugsourceUpgrade delveUpgrade go-toolsetUpgrade buildah-testsUpgrade podman-plugins-debuginfoUpgrade grafanaUpgrade grafana-debuginfoUpgrade delve-debugsourceUpgrade buildah-debugsourceUpgrade buildah-tests-debuginfoUpgrade podman-catatonit-debuginfoUpgrade buildah-debuginfoUpgrade podman-remoteUpgrade golang-testsUpgrade podman-pluginsUpgrade podman-debuginfoUpgrade podman-remote-debuginfoUpgrade golang-raceUpgrade buildahUpgrade golang-miscUpgrade golangUpgrade podmanUpgrade golang-srcUpgrade golang-bin | Nov 10, 2021 | Aug 2, 2021 |
| Debian | — | Upgrade golang-1.15 | Jul 30, 2024 | Aug 2, 2021 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Jun 3, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Nov 12, 2021 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Nov 12, 2021 | Aug 2, 2021 |
| Oracle_linux | — | Upgrade podman-remoteUpgrade podman-gvproxyUpgrade buildah-testsUpgrade grafanaUpgrade podman-dockerUpgrade podmanUpgrade buildahUpgrade podman-testsUpgrade podman-pluginsUpgrade podman-catatonit | Nov 17, 2021 | May 21, 2021 |
| Redhat Openshift | — | Upgrade windows-machine-config-rhel8-operatorUpgrade atomic-openshift-service-idlerUpgrade containernetworking-pluginsUpgrade redhat-release-coreosUpgrade butaneUpgrade golang-github-prometheus-promuUpgrade ignitionUpgrade cri-oUpgrade cri-toolsUpgrade openshiftUpgrade openshift-clients | Aug 12, 2021 | May 21, 2021 |
| Redhat_linux | — | Upgrade podman-plugins-debuginfoUpgrade golangUpgrade podmanUpgrade delve-debuginfoUpgrade golang-binUpgrade buildah-debugsourceUpgrade golang-miscUpgrade podman-pluginsUpgrade delve-debugsourceUpgrade grafanaUpgrade podman-debuginfoUpgrade podman-remoteUpgrade delveUpgrade podman-debugsourceUpgrade podman-remote-debuginfoUpgrade buildah-tests-debuginfoUpgrade golang-srcUpgrade podman-catatonit-debuginfoUpgrade golang-testsUpgrade podman-gvproxy-debuginfoUpgrade podman-testsUpgrade go-toolsetUpgrade buildahUpgrade golang-raceNo solution existsUpgrade grafana-debuginfoUpgrade buildah-testsUpgrade buildah-debuginfoUpgrade podman-dockerUpgrade podman-gvproxyUpgrade golang-docs | Nov 10, 2021 | Aug 2, 2021 |
| Rocky_linux | — | Upgrade go-toolsetUpgrade grafanaUpgrade golangUpgrade golang-raceUpgrade delve-debuginfoUpgrade grafana-debuginfoUpgrade golang-binUpgrade delve-debugsourceUpgrade delve | Mar 12, 2024 | Aug 2, 2021 |
| Suse | — | Upgrade go1.16-docUpgrade go1.15Upgrade go1.15-docUpgrade go1.16-raceUpgrade go1.16Upgrade go1.15-race | Jul 1, 2021 | Jun 28, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub