Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go 1.18.4 allows HTTP request smuggling if combined with an intermediate server that also improperly fails to reject the header as invalid.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade git-lfsUpgrade podman-gvproxyUpgrade libslirpUpgrade aardvark-dnsUpgrade golangUpgrade skopeo-testsUpgrade containers-commonUpgrade libslirp-develUpgrade slirp4netnsUpgrade toolboxUpgrade conmonUpgrade delveUpgrade golang-raceUpgrade criu-libsUpgrade criu-develUpgrade go-toolsetUpgrade golang-srcUpgrade oci-seccomp-bpf-hookUpgrade python3-podmanUpgrade golang-miscUpgrade netavarkUpgrade grafana-pcpUpgrade grafanaUpgrade crunUpgrade podman-testsUpgrade golang-docsUpgrade udicaUpgrade podman-remoteUpgrade podman-pluginsUpgrade critUpgrade golang-binUpgrade buildah-testsUpgrade skopeoUpgrade python3-criuUpgrade containernetworking-pluginsUpgrade runcUpgrade container-selinuxUpgrade buildahUpgrade cockpit-podmanUpgrade toolbox-testsUpgrade golang-testsUpgrade podman-dockerUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade criuUpgrade podman | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade go-rpm-macrosUpgrade golang-github-kr-pty-develUpgrade golang-docsUpgrade runc-debuginfoUpgrade golist-debuginfoUpgrade go-filesystemUpgrade golang-github-godbus-dbus-develUpgrade golang-googlecode-net-develUpgrade runcUpgrade golang-sharedUpgrade golang-binUpgrade go-rpm-templatesUpgrade golangUpgrade golistUpgrade golang-github-gorilla-mux-develUpgrade golang-miscUpgrade golang-github-syndtr-gocapability-develUpgrade golang-srcUpgrade golang-testsUpgrade go-srpm-macrosUpgrade golang-github-gorilla-context-develUpgrade golang-googlecode-sqlite-develUpgrade golang-race | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-sharedUpgrade golang-binUpgrade golang-docsUpgrade golist-debugsourceUpgrade golist-debuginfoUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-testsUpgrade golang-raceUpgrade golistUpgrade golang-miscUpgrade golang-github-cpuguy83-md2manUpgrade golang-github-cpuguy83-md2man-develUpgrade golangUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-src | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade cockpit-podmanUpgrade git-lfsUpgrade buildahUpgrade go-toolsetUpgrade netavarkUpgrade udicaUpgrade toolboxUpgrade libslirpUpgrade golang-raceUpgrade slirp4netns-debuginfoUpgrade toolbox-debugsourceUpgrade toolbox-testsUpgrade buildah-testsUpgrade conmonUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfsUpgrade criu-libs-debuginfoUpgrade crun-debuginfoUpgrade golang-docsUpgrade crunUpgrade podman-pluginsUpgrade toolbox-debuginfoUpgrade grafana-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade python3-podmanUpgrade grafanaUpgrade podman-catatonitUpgrade skopeo-debuginfoUpgrade skopeo-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade conmon-debuginfoUpgrade criuUpgrade libslirp-debugsourceUpgrade podman-gvproxyUpgrade grafana-pcp-debuginfoUpgrade podman-debugsourceUpgrade podman-testsUpgrade podman-dockerUpgrade slirp4netnsUpgrade git-lfs-debugsourceUpgrade golang-binUpgrade podmanUpgrade podman-gvproxy-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade podman-remote-debuginfoUpgrade grafana-pcpUpgrade delve-debugsourceUpgrade slirp4netns-debugsourceUpgrade runc-debugsourceUpgrade delve-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-debugsourceUpgrade skopeoUpgrade golang-miscUpgrade delveUpgrade aardvark-dnsUpgrade git-lfs-debuginfoUpgrade golang-testsUpgrade golang-srcUpgrade criu-develUpgrade buildah-debuginfoUpgrade podman-catatonit-debuginfoUpgrade python3-criuUpgrade podman-remoteUpgrade criu-libsUpgrade critUpgrade runc-debuginfoUpgrade podman-debuginfoUpgrade conmon-debugsourceUpgrade golangUpgrade fuse-overlayfs-debugsourceUpgrade containers-commonUpgrade podman-plugins-debuginfoUpgrade libslirp-develUpgrade criu-debugsourceUpgrade criu-debuginfoUpgrade runcUpgrade crun-debugsourceUpgrade libslirp-debuginfoUpgrade buildah-tests-debuginfoUpgrade skopeo-testsUpgrade containernetworking-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade container-selinux | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Nov 3, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade criuUpgrade udicaUpgrade criu-develUpgrade podmanUpgrade critUpgrade golang-binUpgrade container-selinuxUpgrade grafana-pcpUpgrade aardvark-dnsUpgrade delveUpgrade containernetworking-pluginsUpgrade skopeoUpgrade runcUpgrade podman-remoteUpgrade golang-docsUpgrade golang-testsUpgrade buildah-testsUpgrade python3-criuUpgrade podman-catatonitUpgrade skopeo-testsUpgrade libslirpUpgrade cockpit-podmanUpgrade containers-commonUpgrade grafanaUpgrade golang-raceUpgrade crunUpgrade go-toolsetUpgrade golang-srcUpgrade libslirp-develUpgrade git-lfsUpgrade buildahUpgrade golangUpgrade golang-miscUpgrade python3-podmanUpgrade slirp4netnsUpgrade podman-pluginsUpgrade podman-dockerUpgrade oci-seccomp-bpf-hookUpgrade conmonUpgrade podman-testsUpgrade podman-gvproxyUpgrade netavarkUpgrade fuse-overlayfsUpgrade criu-libs | Aug 4, 2022 | Jul 12, 2022 |
| Redhat Openshift | — | Upgrade python-oslo-metricsUpgrade python-oslo-middlewareUpgrade python-zakeUpgrade python-ironic-prometheus-exporterUpgrade buildahUpgrade python-editorUpgrade python-oslo-serializationUpgrade python-oslo-upgradecheckUpgrade crunUpgrade console-login-helper-messagesUpgrade python-paste-deployUpgrade python-oslo-messagingUpgrade python-os-traitsUpgrade python-dogpile-cacheUpgrade python-oslo-serviceUpgrade python-pecanUpgrade python-keystoneclientUpgrade conmonUpgrade python-fastenersUpgrade python-SecretStorageUpgrade python-memcachedUpgrade python-proliantutilsUpgrade container-selinuxUpgrade python-cliffUpgrade python-alembicUpgrade kata-containersUpgrade pyparsingUpgrade libsodiumUpgrade python-pasteUpgrade python-wcwidthUpgrade python-webobUpgrade python-oslo-contextUpgrade python-stevedoreUpgrade cri-toolsUpgrade python-repoze-lruUpgrade python-routesUpgrade python-redisUpgrade python-werkzeugUpgrade openvswitch2.17Upgrade python-pyrsistentUpgrade python-pintUpgrade python-munchUpgrade slirp4netnsUpgrade python-ironic-libUpgrade python-os-service-typesUpgrade openstack-ironicUpgrade openstack-ironic-python-agentUpgrade cri-oUpgrade openstack-ironic-inspectorUpgrade python-sushy-oem-idracUpgrade python-oslo-versionedobjectsUpgrade python-futuristUpgrade python-automatonUpgrade python-pynaclUpgrade python-jsonpath-rwUpgrade python-funcsigsUpgrade python-cinderclientUpgrade python-scciclientUpgrade python-amqpUpgrade python-importlib-metadataUpgrade python-statsdUpgrade coreos-installerUpgrade python-pycadfUpgrade python-pexpectUpgrade python-packagingUpgrade python-tempitaUpgrade python-dracclientUpgrade python-toozUpgrade rust-afterburnUpgrade python-migrateUpgrade python-hardwareUpgrade python-oslo-utilsUpgrade python-soupsieveUpgrade python-swiftclientUpgrade python-osprofilerUpgrade python-msgpackUpgrade python-oslo-rootwrapUpgrade python-pbrUpgrade openshiftUpgrade python-oslo-concurrencyUpgrade python-oslo-configUpgrade python-sushyUpgrade python-oslo-cacheUpgrade python-rfc3986Upgrade python-sqlparseUpgrade openshift-clientsUpgrade ovn22.03Upgrade python-constructUpgrade python-pyperclipUpgrade rust-bootupdUpgrade python-tenacityUpgrade python-zeroconfUpgrade python-requestsexceptionsUpgrade python-vineUpgrade containernetworking-pluginsUpgrade skopeoUpgrade python-glanceclientUpgrade containers-commonUpgrade python-keyringUpgrade python-logutilsUpgrade python-simplegenericUpgrade python-ifaddrUpgrade python-keystoneauth1Upgrade python-flaskUpgrade python-prometheus_clientUpgrade criuUpgrade openshift-ansibleUpgrade ovn22.06Upgrade python-kazooUpgrade python-iso8601Upgrade python-simplejsonUpgrade python-oslo-logUpgrade python-singledispatchUpgrade python-voluptuousUpgrade butaneUpgrade python-greenletUpgrade python-oslo-i18nUpgrade python-warlockUpgrade ignitionUpgrade python-zippUpgrade python-webtestUpgrade python-retryingUpgrade python-cachetoolsUpgrade runcUpgrade python-oslo-policyUpgrade python-beautifulsoup4Upgrade python-decoratorUpgrade python-jsonschemaUpgrade python-osc-libUpgrade atomic-openshift-service-idlerUpgrade podmanUpgrade haproxyUpgrade python-coloramaUpgrade python-sixUpgrade python-wsmeUpgrade python-appdirsUpgrade pysnmpUpgrade python-debtcollectorUpgrade python-bcryptUpgrade openshift-kuryrUpgrade python-wraptUpgrade python-oslo-dbUpgrade toolboxUpgrade fuse-overlayfsUpgrade python-openstacksdkUpgrade python-kombuUpgrade libslirpUpgrade python-dataclassesUpgrade python-waitress | Nov 29, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade golang-miscUpgrade containernetworking-plugins-debuginfoUpgrade libslirpUpgrade golangUpgrade runc-debugsourceUpgrade podman-plugins-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade python3-podmanUpgrade podman-dockerUpgrade skopeo-debuginfoUpgrade grafanaUpgrade conmonUpgrade buildah-testsUpgrade criu-libsUpgrade delve-debuginfoUpgrade libslirp-develUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-raceUpgrade delveUpgrade oci-seccomp-bpf-hookUpgrade podman-testsUpgrade fuse-overlayfs-debugsourceUpgrade podman-gvproxyUpgrade slirp4netns-debuginfoUpgrade buildah-tests-debuginfoUpgrade criu-debuginfoUpgrade cockpit-podmanUpgrade runc-debuginfoUpgrade crun-debuginfoUpgrade go-toolsetUpgrade git-lfsUpgrade conmon-debuginfoUpgrade slirp4netnsUpgrade skopeo-testsUpgrade containers-commonUpgrade container-selinuxUpgrade criu-develUpgrade golang-srcUpgrade podman-debugsourceUpgrade git-lfs-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debugsourceUpgrade git-lfs-debuginfoUpgrade critUpgrade fuse-overlayfsUpgrade podman-gvproxy-debuginfoUpgrade podman-catatonitUpgrade skopeo-debugsourceUpgrade grafana-pcp-debuginfoUpgrade podman-remote-debuginfoUpgrade criu-libs-debuginfoUpgrade runcUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolbox-debugsourceUpgrade grafana-debuginfoUpgrade libslirp-debuginfoUpgrade toolbox-testsUpgrade toolbox-debuginfoUpgrade criuUpgrade buildahUpgrade podman-remoteUpgrade podman-pluginsUpgrade libslirp-debugsourceUpgrade delve-debugsourceUpgrade golang-binUpgrade podmanUpgrade python3-criuUpgrade conmon-debugsourceUpgrade aardvark-dnsUpgrade crunUpgrade golang-docsUpgrade containernetworking-pluginsUpgrade buildah-debuginfoUpgrade golang-testsUpgrade criu-debugsourceUpgrade podman-debuginfoUpgrade skopeoUpgrade podman-catatonit-debuginfoUpgrade toolboxNo solution existsUpgrade netavarkUpgrade udicaUpgrade crun-debugsourceUpgrade grafana-pcp | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade oci-seccomp-bpf-hook-debugsourceUpgrade crun-debuginfoUpgrade podman-plugins-debuginfoUpgrade runcUpgrade toolbox-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade podman-remote-debuginfoUpgrade libslirp-develUpgrade podman-testsUpgrade grafanaUpgrade delve-debugsourceUpgrade skopeoUpgrade runc-debuginfoUpgrade buildah-debugsourceUpgrade conmonUpgrade python3-criuUpgrade git-lfs-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-catatonit-debuginfoUpgrade libslirp-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade podmanUpgrade git-lfsUpgrade containers-commonUpgrade golang-raceUpgrade libslirpUpgrade toolbox-debugsourceUpgrade delveUpgrade podman-debugsourceUpgrade podman-pluginsUpgrade critUpgrade crunUpgrade criu-libsUpgrade skopeo-testsUpgrade containernetworking-plugins-debuginfoUpgrade libslirp-debuginfoUpgrade toolboxUpgrade criu-develUpgrade slirp4netns-debuginfoUpgrade slirp4netns-debugsourceUpgrade criu-libs-debuginfoUpgrade buildahUpgrade skopeo-debugsourceUpgrade containernetworking-pluginsUpgrade conmon-debuginfoUpgrade delve-debuginfoUpgrade go-toolsetUpgrade skopeo-debuginfoUpgrade runc-debugsourceUpgrade grafana-debuginfoUpgrade buildah-tests-debuginfoUpgrade criu-debugsourceUpgrade toolbox-testsUpgrade podman-remoteUpgrade golangUpgrade git-lfs-debuginfoUpgrade conmon-debugsourceUpgrade golang-binUpgrade grafana-pcpUpgrade fuse-overlayfsUpgrade slirp4netnsUpgrade grafana-pcp-debuginfoUpgrade buildah-debuginfoUpgrade buildah-testsUpgrade fuse-overlayfs-debugsourceUpgrade criuUpgrade criu-debuginfoUpgrade podman-debuginfoUpgrade podman-catatonit | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.0.5 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-opensslUpgrade go1.18Upgrade go1.17-docUpgrade go1.17Upgrade go1.18-docUpgrade go1.17-raceUpgrade go1.18-raceUpgrade go1.18-openssl-docUpgrade go1.18-openssl-race | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.16-srcUpgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.16Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.16-goUpgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.13-goUpgrade golang-1.18-goUpgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13Upgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13-src | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub