Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go 1.18.4 allows HTTP request smuggling if combined with an intermediate server that also improperly fails to reject the header as invalid.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade buildah-testsUpgrade podmanUpgrade critUpgrade criuUpgrade podman-catatonitUpgrade golang-binUpgrade skopeoUpgrade golang-testsUpgrade podman-dockerUpgrade podman-remoteUpgrade fuse-overlayfsUpgrade python3-criuUpgrade podman-testsUpgrade golang-docsUpgrade crunUpgrade containernetworking-pluginsUpgrade podman-pluginsUpgrade buildahUpgrade container-selinuxUpgrade udicaUpgrade cockpit-podmanUpgrade runcUpgrade toolbox-testsUpgrade libslirp-develUpgrade libslirpUpgrade grafanaUpgrade toolboxUpgrade conmonUpgrade python3-podmanUpgrade golang-srcUpgrade go-toolsetUpgrade delveUpgrade grafana-pcpUpgrade golang-miscUpgrade criu-develUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade podman-gvproxyUpgrade skopeo-testsUpgrade golangUpgrade golang-raceUpgrade git-lfsUpgrade slirp4netnsUpgrade criu-libsUpgrade aardvark-dnsUpgrade netavark | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-miscUpgrade go-srpm-macrosUpgrade golang-raceUpgrade golangUpgrade go-rpm-templatesUpgrade golistUpgrade golang-github-gorilla-mux-develUpgrade golang-github-gorilla-context-develUpgrade golang-googlecode-sqlite-develUpgrade golang-srcUpgrade golang-testsUpgrade golang-github-syndtr-gocapability-develUpgrade go-rpm-macrosUpgrade go-filesystemUpgrade golist-debuginfoUpgrade golang-binUpgrade golang-sharedUpgrade runcUpgrade golang-github-kr-pty-develUpgrade golang-github-godbus-dbus-develUpgrade runc-debuginfoUpgrade golang-googlecode-net-develUpgrade golang-docs | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golistUpgrade golang-srcUpgrade golang-github-cpuguy83-md2manUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-miscUpgrade golang-raceUpgrade golang-testsUpgrade golang-github-cpuguy83-md2man-develUpgrade golangUpgrade golang-sharedUpgrade golang-binUpgrade golang-docsUpgrade golist-debuginfoUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golist-debugsource | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade toolboxUpgrade podman-testsUpgrade toolbox-testsUpgrade conmon-debuginfoUpgrade criuUpgrade golang-raceUpgrade netavarkUpgrade libslirp-debugsourceUpgrade podman-gvproxyUpgrade udicaUpgrade crunUpgrade cockpit-podmanUpgrade git-lfsUpgrade go-toolsetUpgrade git-lfs-debugsourceUpgrade libslirpUpgrade slirp4netns-debuginfoUpgrade grafana-debuginfoUpgrade podman-pluginsUpgrade golang-docsUpgrade containernetworking-plugins-debuginfoUpgrade python3-podmanUpgrade toolbox-debuginfoUpgrade skopeo-debuginfoUpgrade skopeo-debugsourceUpgrade buildahUpgrade toolbox-debugsourceUpgrade criu-libs-debuginfoUpgrade buildah-testsUpgrade podman-catatonitUpgrade conmonUpgrade containernetworking-plugins-debugsourceUpgrade crun-debuginfoUpgrade podman-debugsourceUpgrade podman-dockerUpgrade fuse-overlayfsUpgrade grafanaUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade grafana-pcp-debuginfoUpgrade skopeo-testsUpgrade podman-remoteUpgrade conmon-debugsourceUpgrade golangUpgrade golang-binUpgrade podman-gvproxy-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade criu-libsUpgrade critUpgrade python3-criuUpgrade runc-debugsourceUpgrade skopeoUpgrade golang-miscUpgrade git-lfs-debuginfoUpgrade delveUpgrade aardvark-dnsUpgrade delve-debugsourceUpgrade slirp4netns-debugsourceUpgrade golang-testsUpgrade golang-srcUpgrade criu-develUpgrade buildah-debuginfoUpgrade runc-debuginfoUpgrade podman-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade containers-commonUpgrade crun-debugsourceUpgrade libslirp-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-pluginsUpgrade runcUpgrade podman-plugins-debuginfoUpgrade libslirp-develUpgrade criu-debuginfoUpgrade buildah-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade grafana-pcpUpgrade podman-remote-debuginfoUpgrade container-selinuxUpgrade delve-debuginfoUpgrade criu-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade buildah-tests-debuginfo | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Nov 3, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade podman-dockerUpgrade oci-seccomp-bpf-hookUpgrade python3-podmanUpgrade golangUpgrade criu-libsUpgrade golang-miscUpgrade slirp4netnsUpgrade go-toolsetUpgrade podman-testsUpgrade conmonUpgrade golang-raceUpgrade grafanaUpgrade podman-gvproxyUpgrade netavarkUpgrade cockpit-podmanUpgrade fuse-overlayfsUpgrade golang-srcUpgrade libslirpUpgrade crunUpgrade containers-commonUpgrade buildahUpgrade git-lfsUpgrade libslirp-develUpgrade podman-pluginsUpgrade udicaUpgrade podmanUpgrade grafana-pcpUpgrade delveUpgrade criuUpgrade skopeo-testsUpgrade golang-binUpgrade aardvark-dnsUpgrade containernetworking-pluginsUpgrade podman-catatonitUpgrade critUpgrade golang-testsUpgrade python3-criuUpgrade container-selinuxUpgrade buildah-testsUpgrade skopeoUpgrade runcUpgrade criu-develUpgrade podman-remoteUpgrade golang-docs | Aug 4, 2022 | Jul 12, 2022 |
| Redhat Openshift | — | Upgrade python-oslo-serviceUpgrade conmonUpgrade python-wcwidthUpgrade python-pycdlibUpgrade cri-toolsUpgrade python-werkzeugUpgrade cri-oUpgrade python-openstacksdkUpgrade python-futuristUpgrade python-proliantutilsUpgrade openstack-ironic-inspectorUpgrade crunUpgrade openstack-ironicUpgrade python-os-service-typesUpgrade container-selinuxUpgrade console-login-helper-messagesUpgrade python-fastenersUpgrade python-oslo-messagingUpgrade python-routesUpgrade pyparsingUpgrade python-dogpile-cacheUpgrade openvswitch2.17Upgrade python-zakeUpgrade python-editorUpgrade libsodiumUpgrade python-pyrsistentUpgrade python-os-traitsUpgrade python-keystoneclientUpgrade python-munchUpgrade python-oslo-contextUpgrade python-automatonUpgrade python-paste-deployUpgrade python-cinderclientUpgrade python-jsonpath-rwUpgrade python-pintUpgrade kata-containersUpgrade python-redisUpgrade python-pecanUpgrade buildahUpgrade python-SecretStorageUpgrade python-funcsigsUpgrade python-dataclassesUpgrade python-iso8601Upgrade python-sushy-oem-idracUpgrade python-kazooUpgrade python-kombuUpgrade python-yappiUpgrade python-waitressUpgrade python-oslo-versionedobjectsUpgrade python-pynaclUpgrade python-stevedoreUpgrade python-ironic-prometheus-exporterUpgrade python-oslo-middlewareUpgrade python-oslo-serializationUpgrade python-scciclientUpgrade python-alembicUpgrade python-oslo-upgradecheckUpgrade python-memcachedUpgrade python-oslo-metricsUpgrade openstack-ironic-python-agentUpgrade libslirpUpgrade python-ironic-libUpgrade slirp4netnsUpgrade python-repoze-lruUpgrade python-pasteUpgrade python-statsdUpgrade coreos-installerUpgrade python-migrateUpgrade python-oslo-rootwrapUpgrade python-amqpUpgrade python-pbrUpgrade python-keystonemiddlewareUpgrade python-importlib-metadataUpgrade python-cliffUpgrade python-webobUpgrade python-flaskUpgrade python-oslo-configUpgrade python-soupsieveUpgrade python-jsonschemaUpgrade python-rfc3986Upgrade python-logutilsUpgrade python-warlockUpgrade python-zippUpgrade python-pycadfUpgrade python-appdirsUpgrade python-oslo-policyUpgrade ignitionUpgrade python-oslo-i18nUpgrade python-retryingUpgrade python-beautifulsoup4Upgrade podmanUpgrade python-coloramaUpgrade ovn22.03Upgrade runcUpgrade rust-bootupdUpgrade python-constructUpgrade python-oslo-utilsUpgrade python-keyringUpgrade python-prometheus_clientUpgrade python-packagingUpgrade openshift-clientsUpgrade python-pexpectUpgrade openshiftUpgrade python-decoratorUpgrade python-webtestUpgrade containernetworking-pluginsUpgrade python-dracclientUpgrade python-hardwareUpgrade python-sushyUpgrade python-keystoneauth1Upgrade python-greenletUpgrade python-tempitaUpgrade python-oslo-cacheUpgrade python-vineUpgrade atomic-openshift-service-idlerUpgrade python-bcryptUpgrade python-oslo-logUpgrade python-oslo-dbUpgrade toolboxUpgrade python-osprofilerUpgrade python-wraptUpgrade python-simplejsonUpgrade python-simplegenericUpgrade python-pyperclipUpgrade python-cachetoolsUpgrade pysnmpUpgrade python-osc-libUpgrade python-tenacityUpgrade python-swiftclientUpgrade python-sixUpgrade python-zeroconfUpgrade rust-afterburnUpgrade fuse-overlayfsUpgrade python-singledispatchUpgrade butaneUpgrade openshift-kuryrUpgrade criuUpgrade skopeoUpgrade containers-commonUpgrade python-sqlparseUpgrade python-glanceclientUpgrade openshift-ansibleUpgrade ovn22.06Upgrade python-voluptuousUpgrade python-toozUpgrade python-requestsexceptionsUpgrade python-wsmeUpgrade python-msgpackUpgrade python-debtcollectorUpgrade python-oslo-concurrencyUpgrade haproxyUpgrade python-ifaddr | Nov 29, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade delveUpgrade containers-commonUpgrade criu-develUpgrade git-lfsUpgrade slirp4netnsUpgrade runc-debugsourceUpgrade golangUpgrade cockpit-podmanUpgrade containernetworking-plugins-debugsourceUpgrade libslirpUpgrade runc-debuginfoUpgrade conmon-debuginfoUpgrade skopeo-testsUpgrade skopeo-debuginfoUpgrade buildah-tests-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade python3-podmanUpgrade buildah-testsUpgrade golang-miscUpgrade criu-libsUpgrade grafanaUpgrade libslirp-develUpgrade slirp4netns-debuginfoUpgrade slirp4netns-debugsourceUpgrade delve-debuginfoUpgrade podman-gvproxyUpgrade podman-testsUpgrade golang-raceUpgrade container-selinuxUpgrade crun-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade podman-debugsourceUpgrade git-lfs-debugsourceUpgrade podman-dockerUpgrade podman-plugins-debuginfoUpgrade conmonUpgrade oci-seccomp-bpf-hookUpgrade golang-srcUpgrade go-toolsetUpgrade criu-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfsUpgrade crunUpgrade grafana-pcpUpgrade grafana-debuginfoUpgrade podman-pluginsUpgrade toolbox-debuginfoUpgrade buildahUpgrade runcUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade git-lfs-debuginfoUpgrade criuUpgrade delve-debugsourceUpgrade podman-catatonitUpgrade podman-gvproxy-debuginfoUpgrade podmanUpgrade podman-remoteUpgrade podman-remote-debuginfoUpgrade containernetworking-pluginsUpgrade buildah-debuginfoUpgrade conmon-debugsourceUpgrade golang-binUpgrade toolbox-debugsourceUpgrade golang-testsUpgrade skopeo-debugsourceUpgrade aardvark-dnsUpgrade criu-debugsourceUpgrade podman-debuginfoUpgrade skopeoNo solution existsUpgrade critUpgrade toolboxUpgrade criu-libs-debuginfoUpgrade crun-debugsourceUpgrade buildah-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade udicaUpgrade python3-criuUpgrade netavarkUpgrade golang-docsUpgrade libslirp-debugsourceUpgrade toolbox-testsUpgrade libslirp-debuginfoUpgrade grafana-pcp-debuginfo | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade fuse-overlayfs-debugsourceUpgrade criu-debuginfoUpgrade conmon-debuginfoUpgrade buildah-testsUpgrade containernetworking-pluginsUpgrade grafana-debuginfoUpgrade skopeo-debuginfoUpgrade criu-debugsourceUpgrade buildah-debuginfoUpgrade podman-catatonitUpgrade buildah-tests-debuginfoUpgrade podman-debuginfoUpgrade skopeo-debugsourceUpgrade conmon-debugsourceUpgrade golangUpgrade delve-debuginfoUpgrade go-toolsetUpgrade slirp4netnsUpgrade toolbox-testsUpgrade buildahUpgrade runc-debugsourceUpgrade git-lfs-debuginfoUpgrade fuse-overlayfsUpgrade grafana-pcpUpgrade grafana-pcp-debuginfoUpgrade golang-binUpgrade podman-remoteUpgrade criuUpgrade fuse-overlayfs-debuginfoUpgrade podman-plugins-debuginfoUpgrade criu-libs-debuginfoUpgrade crun-debuginfoUpgrade libslirp-develUpgrade git-lfsUpgrade toolboxUpgrade crun-debugsourceUpgrade criu-develUpgrade libslirp-debugsourceUpgrade libslirp-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade toolbox-debugsourceUpgrade skopeo-testsUpgrade golang-raceUpgrade containers-commonUpgrade libslirpUpgrade criu-libsUpgrade critUpgrade podmanUpgrade podman-catatonit-debuginfoUpgrade python3-criuUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade grafanaUpgrade git-lfs-debugsourceUpgrade conmonUpgrade buildah-debugsourceUpgrade runc-debuginfoUpgrade podman-testsUpgrade containernetworking-plugins-debuginfoUpgrade skopeoUpgrade podman-remote-debuginfoUpgrade delve-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade crunUpgrade delveUpgrade slirp4netns-debugsourceUpgrade slirp4netns-debuginfoUpgrade podman-pluginsUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade toolbox-debuginfoUpgrade runc | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.1.14 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-openssl-raceUpgrade go1.18-raceUpgrade go1.17-raceUpgrade go1.18-openssl-docUpgrade go1.18-docUpgrade go1.17-docUpgrade go1.18Upgrade go1.18-opensslUpgrade go1.17 | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.18-srcUpgrade golang-1.13Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13-srcUpgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.13-goUpgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.16Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.16-goUpgrade golang-1.16-srcUpgrade golang-1.13-src (Ubuntu Pro) | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub