In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy (from net/http/httputil) result in a situation where an attacker is able to drop arbitrary headers.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-gvproxyUpgrade delveUpgrade podman-testsUpgrade buildah-testsUpgrade buildahUpgrade podman-dockerUpgrade grafanaUpgrade podman-pluginsUpgrade podman-remoteUpgrade podman | May 4, 2022 | Aug 2, 2021 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade golang-binUpgrade golangUpgrade golang-miscUpgrade golang-srcUpgrade golang-raceUpgrade golang-sharedUpgrade golang-docsUpgrade golang-tests | Sep 30, 2022 | Aug 2, 2021 |
| Amazon_linux | — | Upgrade golang | Sep 9, 2021 | Jun 28, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 2, 2021 |
| Centos_linux | — | Upgrade delveUpgrade podman-debugsourceUpgrade podman-testsUpgrade podman-dockerUpgrade podman-gvproxy-debuginfoUpgrade go-toolsetUpgrade delve-debuginfoUpgrade buildah-testsUpgrade podman-gvproxyUpgrade golang-docsUpgrade grafanaUpgrade podman-plugins-debuginfoUpgrade delve-debugsourceUpgrade golang-binUpgrade buildah-tests-debuginfoUpgrade buildah-debugsourceUpgrade golang-srcUpgrade golang-raceUpgrade buildah-debuginfoUpgrade grafana-debuginfoUpgrade podman-remoteUpgrade podman-remote-debuginfoUpgrade podman-pluginsUpgrade podman-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade golang-miscUpgrade golangUpgrade buildahUpgrade golang-tests | Nov 10, 2021 | Aug 2, 2021 |
| Debian | — | Upgrade golang-1.15 | Jul 30, 2024 | Aug 2, 2021 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Jun 3, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Nov 12, 2021 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Nov 12, 2021 | Aug 2, 2021 |
| Oracle_linux | — | Upgrade podman-pluginsUpgrade buildahUpgrade podman-testsUpgrade podmanUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade podman-dockerUpgrade grafanaUpgrade podman-remoteUpgrade buildah-tests | Nov 17, 2021 | May 21, 2021 |
| Redhat Openshift | — | Upgrade ignitionUpgrade cri-toolsUpgrade butaneUpgrade redhat-release-coreosUpgrade openshiftUpgrade cri-oUpgrade golang-github-prometheus-promuUpgrade openshift-clientsUpgrade atomic-openshift-service-idlerUpgrade containernetworking-pluginsUpgrade windows-machine-config-rhel8-operator | Aug 12, 2021 | May 21, 2021 |
| Redhat_linux | — | Upgrade delve-debugsourceUpgrade podman-debuginfoUpgrade buildah-tests-debuginfoUpgrade grafanaUpgrade delve-debuginfoUpgrade podman-catatonit-debuginfoUpgrade golangUpgrade golang-srcUpgrade podman-plugins-debuginfoUpgrade buildah-debugsourceUpgrade podman-remoteUpgrade podmanUpgrade delveUpgrade podman-remote-debuginfoUpgrade golang-testsUpgrade podman-pluginsUpgrade golang-binUpgrade golang-miscUpgrade podman-debugsourceUpgrade buildah-debuginfoUpgrade podman-testsUpgrade golang-raceUpgrade grafana-debuginfoUpgrade podman-gvproxyUpgrade go-toolsetUpgrade podman-gvproxy-debuginfoUpgrade buildahNo solution existsUpgrade golang-docsUpgrade buildah-testsUpgrade podman-docker | Nov 10, 2021 | Aug 2, 2021 |
| Rocky_linux | — | Upgrade golangUpgrade go-toolsetUpgrade grafanaUpgrade delve-debuginfoUpgrade delveUpgrade golang-binUpgrade grafana-debuginfoUpgrade delve-debugsourceUpgrade golang-race | Mar 12, 2024 | Aug 2, 2021 |
| Suse | — | Upgrade go1.16Upgrade go1.15-docUpgrade go1.15-raceUpgrade go1.16-raceUpgrade go1.16-docUpgrade go1.15 | Jul 1, 2021 | Jun 28, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub