In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy (from net/http/httputil) result in a situation where an attacker is able to drop arbitrary headers.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podmanUpgrade podman-pluginsUpgrade podman-remoteUpgrade buildahUpgrade podman-gvproxyUpgrade podman-dockerUpgrade buildah-testsUpgrade grafanaUpgrade podman-testsUpgrade delve | May 4, 2022 | Aug 2, 2021 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade golang-sharedUpgrade golang-raceUpgrade golang-testsUpgrade golang-docsUpgrade golang-miscUpgrade golang-binUpgrade golang-srcUpgrade golang | Sep 30, 2022 | Aug 2, 2021 |
| Amazon_linux | — | Upgrade golang | Sep 9, 2021 | Jun 28, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 2, 2021 |
| Centos_linux | — | Upgrade podman-plugins-debuginfoUpgrade podman-dockerUpgrade podman-gvproxyUpgrade podman-debugsourceUpgrade grafanaUpgrade delveUpgrade podman-testsUpgrade delve-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade go-toolsetUpgrade buildah-testsUpgrade golang-docsUpgrade golang-binUpgrade podman-pluginsUpgrade buildah-debuginfoUpgrade podman-remoteUpgrade podman-remote-debuginfoUpgrade podman-debuginfoUpgrade podman-catatonit-debuginfoUpgrade delve-debugsourceUpgrade podmanUpgrade golang-testsUpgrade buildah-debugsourceUpgrade golang-srcUpgrade golang-miscUpgrade golangUpgrade buildahUpgrade grafana-debuginfoUpgrade buildah-tests-debuginfoUpgrade golang-race | Nov 10, 2021 | Aug 2, 2021 |
| Debian | — | Upgrade golang-1.15 | Jul 30, 2024 | Aug 2, 2021 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Jun 3, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Nov 12, 2021 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Nov 12, 2021 | Aug 2, 2021 |
| Oracle_linux | — | Upgrade podman-gvproxyUpgrade grafanaUpgrade podman-remoteUpgrade buildah-testsUpgrade podman-dockerUpgrade podman-pluginsUpgrade podman-testsUpgrade buildahUpgrade podman-catatonitUpgrade podman | Nov 17, 2021 | May 21, 2021 |
| Redhat Openshift | — | Upgrade windows-machine-config-rhel8-operatorUpgrade containernetworking-pluginsUpgrade atomic-openshift-service-idlerUpgrade ignitionUpgrade cri-oUpgrade redhat-release-coreosUpgrade golang-github-prometheus-promuUpgrade butaneUpgrade openshiftUpgrade cri-toolsUpgrade openshift-clients | Aug 12, 2021 | May 21, 2021 |
| Redhat_linux | — | Upgrade podman-debuginfoUpgrade golangUpgrade delveUpgrade golang-testsUpgrade buildah-tests-debuginfoUpgrade delve-debuginfoUpgrade delve-debugsourceUpgrade podman-catatonit-debuginfoUpgrade golang-srcUpgrade podman-remoteUpgrade podman-debugsourceUpgrade podmanUpgrade golang-miscUpgrade podman-plugins-debuginfoUpgrade podman-pluginsUpgrade golang-binUpgrade buildah-debugsourceUpgrade grafanaUpgrade podman-remote-debuginfoUpgrade buildah-debuginfoUpgrade podman-gvproxy-debuginfoNo solution existsUpgrade golang-docsUpgrade buildah-testsUpgrade podman-testsUpgrade golang-raceUpgrade podman-gvproxyUpgrade podman-dockerUpgrade grafana-debuginfoUpgrade buildahUpgrade go-toolset | Nov 10, 2021 | Aug 2, 2021 |
| Rocky_linux | — | Upgrade delveUpgrade golang-binUpgrade delve-debugsourceUpgrade grafana-debuginfoUpgrade golang-raceUpgrade delve-debuginfoUpgrade golangUpgrade grafanaUpgrade go-toolset | Mar 12, 2024 | Aug 2, 2021 |
| Suse | — | Upgrade go1.15Upgrade go1.16-docUpgrade go1.15-docUpgrade go1.15-raceUpgrade go1.16Upgrade go1.16-race | Jul 1, 2021 | Jun 28, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub