In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy (from net/http/httputil) result in a situation where an attacker is able to drop arbitrary headers.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-remoteUpgrade podmanUpgrade podman-pluginsUpgrade podman-dockerUpgrade delveUpgrade buildahUpgrade podman-testsUpgrade podman-gvproxyUpgrade buildah-testsUpgrade grafana | May 4, 2022 | Aug 2, 2021 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade golang-docsUpgrade golang-sharedUpgrade golang-testsUpgrade golang-raceUpgrade golangUpgrade golang-srcUpgrade golang-miscUpgrade golang-bin | Sep 30, 2022 | Aug 2, 2021 |
| Amazon_linux | — | Upgrade golang | Sep 9, 2021 | Jun 28, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 2, 2021 |
| Centos_linux | — | Upgrade podman-debugsourceUpgrade go-toolsetUpgrade golang-docsUpgrade podman-plugins-debuginfoUpgrade buildah-testsUpgrade grafanaUpgrade delveUpgrade podman-testsUpgrade delve-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-dockerUpgrade podman-gvproxyUpgrade podman-catatonit-debuginfoUpgrade golang-raceUpgrade podmanUpgrade podman-debuginfoUpgrade delve-debugsourceUpgrade podman-pluginsUpgrade grafana-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-remoteUpgrade buildah-debuginfoUpgrade buildah-tests-debuginfoUpgrade golang-testsUpgrade golang-miscUpgrade golangUpgrade buildahUpgrade buildah-debugsourceUpgrade golang-srcUpgrade golang-bin | Nov 10, 2021 | Aug 2, 2021 |
| Debian | — | Upgrade golang-1.15 | Jul 30, 2024 | Aug 2, 2021 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Jun 3, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Nov 12, 2021 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Nov 12, 2021 | Aug 2, 2021 |
| Oracle_linux | — | Upgrade podman-dockerUpgrade podman-remoteUpgrade buildah-testsUpgrade podman-gvproxyUpgrade grafanaUpgrade podman-pluginsUpgrade podman-catatonitUpgrade buildahUpgrade podman-testsUpgrade podman | Nov 17, 2021 | May 21, 2021 |
| Redhat Openshift | — | Upgrade butaneUpgrade ignitionUpgrade cri-toolsUpgrade redhat-release-coreosUpgrade golang-github-prometheus-promuUpgrade openshiftUpgrade openshift-clientsUpgrade cri-oUpgrade atomic-openshift-service-idlerUpgrade containernetworking-pluginsUpgrade windows-machine-config-rhel8-operator | Aug 12, 2021 | May 21, 2021 |
| Redhat_linux | — | Upgrade buildah-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-testsNo solution existsUpgrade go-toolsetUpgrade buildah-testsUpgrade podman-gvproxyUpgrade buildahUpgrade podman-dockerUpgrade golang-docsUpgrade golang-raceUpgrade grafana-debuginfoUpgrade podman-debuginfoUpgrade delveUpgrade podman-pluginsUpgrade delve-debuginfoUpgrade grafanaUpgrade delve-debugsourceUpgrade golangUpgrade golang-srcUpgrade buildah-tests-debuginfoUpgrade podman-debugsourceUpgrade buildah-debugsourceUpgrade golang-miscUpgrade golang-binUpgrade podman-catatonit-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-remoteUpgrade podmanUpgrade golang-testsUpgrade podman-remote-debuginfo | Nov 10, 2021 | Aug 2, 2021 |
| Rocky_linux | — | Upgrade delveUpgrade delve-debugsourceUpgrade golang-binUpgrade golang-raceUpgrade grafana-debuginfoUpgrade delve-debuginfoUpgrade grafanaUpgrade go-toolsetUpgrade golang | Mar 12, 2024 | Aug 2, 2021 |
| Suse | — | Upgrade go1.16-docUpgrade go1.15Upgrade go1.16Upgrade go1.15-raceUpgrade go1.16-raceUpgrade go1.15-doc | Jul 1, 2021 | Jun 28, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub