Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go 1.18.4 allows HTTP request smuggling if combined with an intermediate server that also improperly fails to reject the header as invalid.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade grafanaUpgrade libslirp-develUpgrade containers-commonUpgrade toolboxUpgrade criu-develUpgrade delveUpgrade golang-raceUpgrade slirp4netnsUpgrade go-toolsetUpgrade podman-gvproxyUpgrade oci-seccomp-bpf-hookUpgrade golang-srcUpgrade libslirpUpgrade python3-podmanUpgrade grafana-pcpUpgrade aardvark-dnsUpgrade conmonUpgrade skopeo-testsUpgrade netavarkUpgrade git-lfsUpgrade criu-libsUpgrade golang-miscUpgrade golangUpgrade fuse-overlayfsUpgrade toolbox-testsUpgrade runcUpgrade podman-testsUpgrade podman-remoteUpgrade cockpit-podmanUpgrade buildahUpgrade container-selinuxUpgrade buildah-testsUpgrade criuUpgrade podman-dockerUpgrade golang-docsUpgrade udicaUpgrade containernetworking-pluginsUpgrade crunUpgrade podman-catatonitUpgrade golang-binUpgrade critUpgrade podman-pluginsUpgrade podmanUpgrade golang-testsUpgrade skopeoUpgrade python3-criu | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-srcUpgrade golang-testsUpgrade golang-miscUpgrade golangUpgrade golang-github-gorilla-context-develUpgrade golang-raceUpgrade go-srpm-macrosUpgrade go-rpm-templatesUpgrade golang-github-gorilla-mux-develUpgrade golang-github-syndtr-gocapability-develUpgrade golistUpgrade golang-googlecode-sqlite-develUpgrade golang-github-godbus-dbus-develUpgrade golist-debuginfoUpgrade golang-googlecode-net-develUpgrade golang-sharedUpgrade golang-github-kr-pty-develUpgrade runc-debuginfoUpgrade runcUpgrade golang-docsUpgrade go-filesystemUpgrade golang-binUpgrade go-rpm-macros | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golist-debuginfoUpgrade golang-docsUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-sharedUpgrade golist-debugsourceUpgrade golang-binUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golistUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-raceUpgrade golang-github-cpuguy83-md2manUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-miscUpgrade golang-srcUpgrade golangUpgrade golang-tests | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade runcUpgrade golangUpgrade libslirp-develUpgrade criu-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade delve-debuginfoUpgrade buildah-debugsourceUpgrade buildah-debuginfoUpgrade criu-debugsourceUpgrade podman-plugins-debuginfoUpgrade git-lfs-debuginfoUpgrade skopeoUpgrade aardvark-dnsUpgrade delveUpgrade golang-miscUpgrade podman-debuginfoUpgrade buildah-tests-debuginfoUpgrade critUpgrade skopeo-testsUpgrade runc-debugsourceUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade container-selinuxUpgrade delve-debugsourceUpgrade grafana-pcpUpgrade podman-remote-debuginfoUpgrade libslirp-debuginfoUpgrade golang-srcUpgrade conmon-debugsourceUpgrade criu-develUpgrade containers-commonUpgrade golang-testsUpgrade runc-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-pluginsUpgrade podman-catatonit-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade criu-libsUpgrade podman-remoteUpgrade podmanUpgrade python3-criuUpgrade golang-binUpgrade crun-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade podman-gvproxyUpgrade conmon-debuginfoUpgrade podman-testsUpgrade libslirp-debugsourceUpgrade criuUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade cockpit-podmanUpgrade buildahUpgrade slirp4netns-debuginfoUpgrade git-lfsUpgrade libslirpUpgrade fuse-overlayfsUpgrade python3-podmanUpgrade containernetworking-plugins-debuginfoUpgrade toolbox-debuginfoUpgrade toolboxUpgrade podman-dockerUpgrade podman-debugsourceUpgrade grafana-pcp-debuginfoUpgrade podman-pluginsUpgrade grafana-debuginfoUpgrade git-lfs-debugsourceUpgrade crunUpgrade golang-docsUpgrade slirp4netnsUpgrade crun-debuginfoUpgrade criu-libs-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade conmonUpgrade podman-catatonitUpgrade buildah-testsUpgrade skopeo-debugsourceUpgrade skopeo-debuginfoUpgrade udicaUpgrade toolbox-testsUpgrade toolbox-debugsourceUpgrade netavarkUpgrade golang-raceUpgrade grafanaUpgrade go-toolset | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go117Upgrade go118 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Nov 3, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade criuUpgrade podman-remoteUpgrade golang-docsUpgrade skopeo-testsUpgrade container-selinuxUpgrade golang-testsUpgrade criu-develUpgrade python3-criuUpgrade runcUpgrade udicaUpgrade critUpgrade golang-binUpgrade podmanUpgrade grafana-pcpUpgrade aardvark-dnsUpgrade containernetworking-pluginsUpgrade delveUpgrade skopeoUpgrade podman-catatonitUpgrade buildah-testsUpgrade podman-pluginsUpgrade libslirpUpgrade crunUpgrade containers-commonUpgrade cockpit-podmanUpgrade go-toolsetUpgrade conmonUpgrade golang-srcUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hookUpgrade podman-dockerUpgrade python3-podmanUpgrade golang-miscUpgrade golangUpgrade libslirp-develUpgrade git-lfsUpgrade buildahUpgrade criu-libsUpgrade podman-testsUpgrade netavarkUpgrade fuse-overlayfsUpgrade podman-gvproxyUpgrade golang-raceUpgrade grafana | Aug 4, 2022 | Jul 12, 2022 |
| Redhat Openshift | — | Upgrade python-sixUpgrade openshiftUpgrade openshift-clientsUpgrade podmanUpgrade atomic-openshift-service-idlerUpgrade python-beautifulsoup4Upgrade python-decoratorUpgrade haproxyUpgrade python-vineUpgrade python-dracclientUpgrade python-glanceclientUpgrade python-sqlparseUpgrade python-oslo-cacheUpgrade ovn22.03Upgrade python-keystoneauth1Upgrade python-oslo-policyUpgrade python-simplegenericUpgrade containers-commonUpgrade skopeoUpgrade containernetworking-pluginsUpgrade python-pexpectUpgrade python-oslo-utilsUpgrade python-pyperclipUpgrade python-packagingUpgrade openshift-ansibleUpgrade python-tenacityUpgrade python-requestsexceptionsUpgrade python-hardwareUpgrade python-oslo-configUpgrade python-logutilsUpgrade python-pycadfUpgrade python-sushyUpgrade python-osprofilerUpgrade rust-afterburnUpgrade python-msgpackUpgrade toolboxUpgrade pysnmpUpgrade python-toozUpgrade python-osc-libUpgrade ovn22.06Upgrade python-simplejsonUpgrade python-bcryptUpgrade openshift-kuryrUpgrade python-wraptUpgrade python-jsonschemaUpgrade python-wsmeUpgrade criuUpgrade fuse-overlayfsUpgrade python-swiftclientUpgrade python-oslo-logUpgrade python-voluptuousUpgrade python-soupsieveUpgrade python-debtcollectorUpgrade python-appdirsUpgrade butaneUpgrade python-zeroconfUpgrade python-prometheus_clientUpgrade python-flaskUpgrade python-coloramaUpgrade python-warlockUpgrade python-retryingUpgrade python-oslo-i18nUpgrade python-ifaddrUpgrade ignitionUpgrade python-oslo-dbUpgrade python-tempitaUpgrade python-rfc3986Upgrade python-greenletUpgrade python-oslo-concurrencyUpgrade python-keyringUpgrade python-zippUpgrade python-webtestUpgrade rust-bootupdUpgrade python-singledispatchUpgrade runcUpgrade python-constructUpgrade python-cachetoolsUpgrade python-stevedoreUpgrade openstack-ironic-inspectorUpgrade python-pintUpgrade python-importlib-metadataUpgrade python-amqpUpgrade python-pbrUpgrade python-repoze-lruUpgrade python-oslo-metricsUpgrade python-yappiUpgrade libslirpUpgrade python-openstacksdkUpgrade python-migrateUpgrade python-oslo-versionedobjectsUpgrade python-iso8601Upgrade python-munchUpgrade python-fastenersUpgrade python-oslo-middlewareUpgrade python-keystonemiddlewareUpgrade python-dataclassesUpgrade python-editorUpgrade python-oslo-rootwrapUpgrade python-kombuUpgrade openstack-ironicUpgrade python-waitressUpgrade container-selinuxUpgrade python-memcachedUpgrade python-cinderclientUpgrade cri-oUpgrade python-SecretStorageUpgrade python-paste-deployUpgrade python-automatonUpgrade slirp4netnsUpgrade python-oslo-upgradecheckUpgrade console-login-helper-messagesUpgrade python-ironic-libUpgrade python-webobUpgrade python-kazooUpgrade python-proliantutilsUpgrade python-wcwidthUpgrade python-statsdUpgrade python-futuristUpgrade python-oslo-contextUpgrade python-alembicUpgrade python-routesUpgrade cri-toolsUpgrade openvswitch2.17Upgrade python-os-traitsUpgrade python-zakeUpgrade python-pyrsistentUpgrade python-dogpile-cacheUpgrade python-keystoneclientUpgrade libsodiumUpgrade pyparsingUpgrade python-oslo-serviceUpgrade python-oslo-serializationUpgrade conmonUpgrade python-os-service-typesUpgrade python-oslo-messagingUpgrade crunUpgrade python-redisUpgrade python-jsonpath-rwUpgrade python-funcsigsUpgrade python-werkzeugUpgrade python-pasteUpgrade python-ironic-prometheus-exporterUpgrade python-pecanUpgrade buildahUpgrade kata-containersUpgrade python-scciclientUpgrade python-sushy-oem-idracUpgrade python-cliffUpgrade coreos-installerUpgrade openstack-ironic-python-agentUpgrade python-pycdlibUpgrade python-pynacl | Nov 29, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade golang-srcUpgrade delveUpgrade crun-debuginfoUpgrade buildah-testsUpgrade oci-seccomp-bpf-hookUpgrade podman-testsUpgrade golang-raceUpgrade criu-libsUpgrade go-toolsetUpgrade grafanaUpgrade libslirp-develUpgrade delve-debuginfoUpgrade git-lfsUpgrade criu-debuginfoUpgrade cockpit-podmanUpgrade podman-plugins-debuginfoUpgrade podman-gvproxyUpgrade criu-develUpgrade skopeo-testsUpgrade containers-commonUpgrade fuse-overlayfs-debugsourceUpgrade container-selinuxUpgrade conmonUpgrade slirp4netns-debuginfoUpgrade runc-debugsourceUpgrade conmon-debuginfoUpgrade libslirpUpgrade podman-debugsourceUpgrade git-lfs-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade golangUpgrade containernetworking-plugins-debuginfoUpgrade podman-dockerUpgrade golang-miscUpgrade runc-debuginfoUpgrade python3-podmanUpgrade slirp4netnsUpgrade slirp4netns-debugsourceUpgrade buildah-tests-debuginfoUpgrade skopeo-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade grafana-pcpUpgrade netavarkUpgrade crun-debugsourceUpgrade grafana-debuginfoNo solution existsUpgrade toolbox-testsUpgrade criu-debugsourceUpgrade python3-criuUpgrade fuse-overlayfsUpgrade podman-pluginsUpgrade libslirp-debugsourceUpgrade critUpgrade fuse-overlayfs-debuginfoUpgrade criu-libs-debuginfoUpgrade skopeo-debugsourceUpgrade podman-remoteUpgrade buildahUpgrade buildah-debugsourceUpgrade podman-catatonit-debuginfoUpgrade toolboxUpgrade udicaUpgrade grafana-pcp-debuginfoUpgrade runcUpgrade podman-gvproxy-debuginfoUpgrade delve-debugsourceUpgrade podman-catatonitUpgrade skopeoUpgrade crunUpgrade conmon-debugsourceUpgrade containernetworking-pluginsUpgrade golang-binUpgrade buildah-debuginfoUpgrade git-lfs-debuginfoUpgrade golang-docsUpgrade aardvark-dnsUpgrade podman-remote-debuginfoUpgrade podman-debuginfoUpgrade podmanUpgrade golang-testsUpgrade libslirp-debuginfoUpgrade toolbox-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criuUpgrade toolbox-debugsource | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade criuUpgrade golang-binUpgrade toolbox-testsUpgrade runc-debugsourceUpgrade skopeo-debugsourceUpgrade skopeo-debuginfoUpgrade buildah-tests-debuginfoUpgrade buildahUpgrade go-toolsetUpgrade criu-debugsourceUpgrade slirp4netnsUpgrade delve-debuginfoUpgrade grafana-debuginfoUpgrade podman-catatonitUpgrade git-lfs-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade podman-remoteUpgrade grafana-pcpUpgrade conmon-debuginfoUpgrade buildah-testsUpgrade buildah-debuginfoUpgrade grafana-pcp-debuginfoUpgrade golangUpgrade podman-debuginfoUpgrade containernetworking-pluginsUpgrade fuse-overlayfsUpgrade conmon-debugsourceUpgrade criu-debuginfoUpgrade podman-testsUpgrade podman-pluginsUpgrade skopeoUpgrade toolbox-debuginfoUpgrade grafanaUpgrade podman-plugins-debuginfoUpgrade buildah-debugsourceUpgrade libslirp-develUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-remote-debuginfoUpgrade criu-develUpgrade fuse-overlayfs-debuginfoUpgrade libslirp-debugsourceUpgrade criu-libs-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-debugsourceUpgrade delveUpgrade slirp4netns-debugsourceUpgrade crunUpgrade runc-debuginfoUpgrade podman-catatonit-debuginfoUpgrade critUpgrade libslirpUpgrade criu-libsUpgrade podmanUpgrade golang-raceUpgrade containers-commonUpgrade skopeo-testsUpgrade containernetworking-plugins-debugsourceUpgrade toolbox-debugsourceUpgrade libslirp-debuginfoUpgrade crun-debugsourceUpgrade git-lfsUpgrade toolboxUpgrade runcUpgrade crun-debuginfoUpgrade delve-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade python3-criuUpgrade conmonUpgrade git-lfs-debugsourceUpgrade oci-seccomp-bpf-hook-debugsource | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.1.14 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18Upgrade go1.18-opensslUpgrade go1.17-docUpgrade go1.17Upgrade go1.18-docUpgrade go1.18-openssl-raceUpgrade go1.17-raceUpgrade go1.18-raceUpgrade go1.18-openssl-doc | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.16-srcUpgrade golang-1.18Upgrade golang-1.16-goUpgrade golang-1.16Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.13-goUpgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13Upgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13-srcUpgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.18-src | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub