In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy (from net/http/httputil) result in a situation where an attacker is able to drop arbitrary headers.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-testsUpgrade podman-dockerUpgrade delveUpgrade podman-gvproxyUpgrade grafanaUpgrade buildah-testsUpgrade buildahUpgrade podmanUpgrade podman-pluginsUpgrade podman-remote | May 4, 2022 | Aug 2, 2021 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade golang-raceUpgrade golang-sharedUpgrade golang-testsUpgrade golang-docsUpgrade golang-miscUpgrade golangUpgrade golang-binUpgrade golang-src | Sep 30, 2022 | Aug 2, 2021 |
| Amazon_linux | — | Upgrade golang | Sep 9, 2021 | Jun 28, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 2, 2021 |
| Centos_linux | — | Upgrade grafanaUpgrade podman-debugsourceUpgrade podman-plugins-debuginfoUpgrade golang-docsUpgrade delveUpgrade podman-gvproxy-debuginfoUpgrade go-toolsetUpgrade podman-testsUpgrade podman-dockerUpgrade delve-debuginfoUpgrade buildah-testsUpgrade podman-gvproxyUpgrade grafana-debuginfoUpgrade podman-debuginfoUpgrade golang-miscUpgrade buildahUpgrade podman-remoteUpgrade golangUpgrade podman-remote-debuginfoUpgrade buildah-debuginfoUpgrade golang-srcUpgrade delve-debugsourceUpgrade golang-testsUpgrade podman-pluginsUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade buildah-tests-debuginfoUpgrade buildah-debugsourceUpgrade golang-binUpgrade golang-race | Nov 10, 2021 | Aug 2, 2021 |
| Debian | — | Upgrade golang-1.15 | Jul 30, 2024 | Aug 2, 2021 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Jun 3, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Nov 12, 2021 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Nov 12, 2021 | Aug 2, 2021 |
| Oracle_linux | — | Upgrade buildah-testsUpgrade podman-dockerUpgrade podman-gvproxyUpgrade grafanaUpgrade podman-remoteUpgrade podman-testsUpgrade podman-pluginsUpgrade buildahUpgrade podmanUpgrade podman-catatonit | Nov 17, 2021 | May 21, 2021 |
| Redhat Openshift | — | Upgrade cri-oUpgrade ignitionUpgrade cri-toolsUpgrade butaneUpgrade openshift-clientsUpgrade redhat-release-coreosUpgrade openshiftUpgrade golang-github-prometheus-promuUpgrade atomic-openshift-service-idlerUpgrade openshift4-wincw/windows-machine-config-rhel8-operatorUpgrade containernetworking-plugins | Aug 12, 2021 | Aug 2, 2021 |
| Redhat_linux | — | Upgrade golang-testsUpgrade podman-pluginsUpgrade podman-remoteUpgrade podman-plugins-debuginfoUpgrade podmanUpgrade golang-miscUpgrade golang-srcUpgrade delveUpgrade podman-catatonit-debuginfoUpgrade delve-debugsourceUpgrade podman-debugsourceUpgrade podman-remote-debuginfoUpgrade podman-debuginfoUpgrade buildah-debugsourceUpgrade golang-binUpgrade golangUpgrade buildah-tests-debuginfoUpgrade grafanaUpgrade delve-debuginfoUpgrade buildah-testsUpgrade go-toolsetUpgrade buildahUpgrade podman-gvproxy-debuginfoUpgrade podman-testsNo solution existsUpgrade golang-raceUpgrade podman-dockerUpgrade podman-gvproxyUpgrade grafana-debuginfoUpgrade buildah-debuginfoUpgrade golang-docs | Nov 10, 2021 | Aug 2, 2021 |
| Rocky_linux | — | Upgrade delve-debugsourceUpgrade grafana-debuginfoUpgrade delveUpgrade golang-binUpgrade delve-debuginfoUpgrade golang-raceUpgrade go-toolsetUpgrade grafanaUpgrade golang | Mar 12, 2024 | Aug 2, 2021 |
| Suse | — | Upgrade go1.15Upgrade go1.16-docUpgrade go1.16Upgrade go1.15-docUpgrade go1.16-raceUpgrade go1.15-race | Jul 1, 2021 | Jun 28, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub