Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go 1.18.4 allows HTTP request smuggling if combined with an intermediate server that also improperly fails to reject the header as invalid.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libslirp-develUpgrade containers-commonUpgrade podman-gvproxyUpgrade grafanaUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade python3-podmanUpgrade grafana-pcpUpgrade slirp4netnsUpgrade netavarkUpgrade golang-srcUpgrade toolboxUpgrade go-toolsetUpgrade conmonUpgrade git-lfsUpgrade golang-miscUpgrade criu-develUpgrade golangUpgrade criu-libsUpgrade skopeo-testsUpgrade delveUpgrade golang-raceUpgrade criuUpgrade podman-pluginsUpgrade podmanUpgrade buildah-testsUpgrade udicaUpgrade crunUpgrade containernetworking-pluginsUpgrade critUpgrade runcUpgrade podman-dockerUpgrade fuse-overlayfsUpgrade python3-criuUpgrade container-selinuxUpgrade toolbox-testsUpgrade cockpit-podmanUpgrade buildahUpgrade golang-binUpgrade podman-remoteUpgrade podman-testsUpgrade skopeoUpgrade podman-catatonitUpgrade golang-docsUpgrade golang-tests | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-github-gorilla-mux-develUpgrade golang-raceUpgrade go-rpm-templatesUpgrade golang-srcUpgrade golang-testsUpgrade golang-github-gorilla-context-develUpgrade golang-googlecode-sqlite-develUpgrade golang-github-syndtr-gocapability-develUpgrade go-srpm-macrosUpgrade golang-miscUpgrade golistUpgrade golangUpgrade runcUpgrade golang-binUpgrade go-filesystemUpgrade golang-sharedUpgrade golang-github-godbus-dbus-develUpgrade golang-github-kr-pty-develUpgrade go-rpm-macrosUpgrade golang-docsUpgrade golang-googlecode-net-develUpgrade golist-debuginfoUpgrade runc-debuginfo | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-sharedUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-binUpgrade golang-docsUpgrade golist-debuginfoUpgrade golist-debugsourceUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-testsUpgrade golangUpgrade golistUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-github-cpuguy83-md2manUpgrade golang-miscUpgrade golang-srcUpgrade golang-race | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade criu-libsUpgrade python3-criuUpgrade golang-binUpgrade podmanUpgrade crun-debugsourceUpgrade container-selinuxUpgrade podman-remoteUpgrade podman-catatonit-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade skopeo-testsUpgrade buildah-tests-debuginfoUpgrade critUpgrade oci-seccomp-bpf-hookUpgrade skopeoUpgrade grafana-pcpUpgrade delve-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-debugsourceUpgrade slirp4netns-debugsourceUpgrade delve-debuginfoUpgrade runc-debugsourceUpgrade criu-debuginfoUpgrade criu-debugsourceUpgrade golang-miscUpgrade libslirp-develUpgrade git-lfs-debuginfoUpgrade delveUpgrade aardvark-dnsUpgrade podman-plugins-debuginfoUpgrade buildah-debuginfoUpgrade criu-develUpgrade runc-debuginfoUpgrade golang-srcUpgrade conmon-debugsourceUpgrade podman-debuginfoUpgrade golang-testsUpgrade runcUpgrade fuse-overlayfs-debuginfoUpgrade libslirp-debuginfoUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade podman-remote-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade golangUpgrade podman-debugsourceUpgrade toolbox-debuginfoUpgrade grafanaUpgrade grafana-pcp-debuginfoUpgrade go-toolsetUpgrade fuse-overlayfsUpgrade podman-pluginsUpgrade grafana-debuginfoUpgrade golang-docsUpgrade git-lfs-debugsourceUpgrade crunUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netnsUpgrade libslirp-debugsourceUpgrade criuUpgrade conmon-debuginfoUpgrade podman-testsUpgrade podman-gvproxyUpgrade podman-dockerUpgrade crun-debuginfoUpgrade criu-libs-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade conmonUpgrade podman-catatonitUpgrade buildah-testsUpgrade skopeo-debugsourceUpgrade skopeo-debuginfoUpgrade udicaUpgrade toolbox-testsUpgrade toolbox-debugsourceUpgrade toolboxUpgrade golang-raceUpgrade python3-podmanUpgrade containernetworking-plugins-debuginfoUpgrade buildahUpgrade slirp4netns-debuginfoUpgrade libslirpUpgrade git-lfsUpgrade netavarkUpgrade cockpit-podman | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go117Upgrade go118 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Nov 3, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade criu-develUpgrade podmanUpgrade containernetworking-pluginsUpgrade aardvark-dnsUpgrade runcUpgrade skopeoUpgrade python3-criuUpgrade golang-testsUpgrade criuUpgrade container-selinuxUpgrade udicaUpgrade podman-catatonitUpgrade skopeo-testsUpgrade buildah-testsUpgrade podman-remoteUpgrade golang-binUpgrade critUpgrade golang-docsUpgrade delveUpgrade grafana-pcpUpgrade podman-testsUpgrade libslirpUpgrade libslirp-develUpgrade git-lfsUpgrade buildahUpgrade grafanaUpgrade golang-raceUpgrade crunUpgrade containers-commonUpgrade cockpit-podmanUpgrade go-toolsetUpgrade golangUpgrade python3-podmanUpgrade golang-miscUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade conmonUpgrade slirp4netnsUpgrade golang-srcUpgrade podman-pluginsUpgrade podman-dockerUpgrade netavarkUpgrade fuse-overlayfsUpgrade podman-gvproxy | Aug 4, 2022 | Jul 12, 2022 |
| Redhat Openshift | — | Upgrade python-zippUpgrade python-vineUpgrade containernetworking-pluginsUpgrade python-oslo-policyUpgrade python-soupsieveUpgrade python-flaskUpgrade python-oslo-cacheUpgrade python-simplegenericUpgrade python-oslo-i18nUpgrade python-msgpackUpgrade python-bcryptUpgrade python-sushyUpgrade python-jsonschemaUpgrade python-ifaddrUpgrade python-hardwareUpgrade python-oslo-configUpgrade ovn22.06Upgrade python-prometheus_clientUpgrade fuse-overlayfsUpgrade python-dracclientUpgrade haproxyUpgrade openshift-ansibleUpgrade python-osc-libUpgrade runcUpgrade python-swiftclientUpgrade python-beautifulsoup4Upgrade python-decoratorUpgrade python-greenletUpgrade python-oslo-logUpgrade podmanUpgrade atomic-openshift-service-idlerUpgrade python-wraptUpgrade openshift-kuryrUpgrade butaneUpgrade python-constructUpgrade python-rfc3986Upgrade python-appdirsUpgrade python-pyperclipUpgrade python-voluptuousUpgrade python-pycadfUpgrade python-logutilsUpgrade toolboxUpgrade skopeoUpgrade ovn22.03Upgrade python-packagingUpgrade containers-commonUpgrade python-simplejsonUpgrade pysnmpUpgrade python-tempitaUpgrade python-oslo-dbUpgrade python-debtcollectorUpgrade python-sixUpgrade python-singledispatchUpgrade python-cachetoolsUpgrade python-osprofilerUpgrade python-webtestUpgrade python-wsmeUpgrade criuUpgrade rust-afterburnUpgrade python-pexpectUpgrade python-oslo-concurrencyUpgrade python-requestsexceptionsUpgrade python-keyringUpgrade openshift-clientsUpgrade python-sqlparseUpgrade rust-bootupdUpgrade python-glanceclientUpgrade python-oslo-utilsUpgrade python-tenacityUpgrade python-toozUpgrade openshiftUpgrade ignitionUpgrade python-coloramaUpgrade python-retryingUpgrade python-warlockUpgrade python-zeroconfUpgrade python-keystoneauth1Upgrade python-oslo-messagingUpgrade python-oslo-contextUpgrade python-oslo-serviceUpgrade python-waitressUpgrade python-pyrsistentUpgrade python-routesUpgrade python-alembicUpgrade python-oslo-upgradecheckUpgrade python-paste-deployUpgrade python-oslo-metricsUpgrade python-os-service-typesUpgrade python-keystonemiddlewareUpgrade python-kazooUpgrade python-redisUpgrade crunUpgrade libslirpUpgrade python-dataclassesUpgrade python-ironic-prometheus-exporterUpgrade python-pbrUpgrade python-werkzeugUpgrade python-memcachedUpgrade python-webobUpgrade cri-oUpgrade python-editorUpgrade python-pynaclUpgrade python-scciclientUpgrade python-oslo-serializationUpgrade python-iso8601Upgrade python-amqpUpgrade conmonUpgrade python-cliffUpgrade buildahUpgrade kata-containersUpgrade python-pycdlibUpgrade python-yappiUpgrade python-pintUpgrade python-ironic-libUpgrade pyparsingUpgrade python-proliantutilsUpgrade python-fastenersUpgrade python-repoze-lruUpgrade cri-toolsUpgrade python-zakeUpgrade python-stevedoreUpgrade python-kombuUpgrade python-oslo-versionedobjectsUpgrade coreos-installerUpgrade python-migrateUpgrade python-sushy-oem-idracUpgrade python-oslo-rootwrapUpgrade python-futuristUpgrade python-wcwidthUpgrade python-os-traitsUpgrade container-selinuxUpgrade python-oslo-middlewareUpgrade slirp4netnsUpgrade openstack-ironicUpgrade libsodiumUpgrade openvswitch2.17Upgrade python-SecretStorageUpgrade python-keystoneclientUpgrade python-munchUpgrade console-login-helper-messagesUpgrade python-dogpile-cacheUpgrade python-openstacksdkUpgrade openstack-ironic-inspectorUpgrade python-funcsigsUpgrade python-automatonUpgrade openstack-ironic-python-agentUpgrade python-importlib-metadataUpgrade python-cinderclientUpgrade python-pasteUpgrade python-statsdUpgrade python-pecanUpgrade python-jsonpath-rw | Nov 29, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade golangUpgrade conmon-debuginfoUpgrade skopeo-debuginfoUpgrade runc-debuginfoUpgrade git-lfsUpgrade podman-plugins-debuginfoUpgrade runc-debugsourceUpgrade podman-dockerUpgrade skopeo-testsUpgrade buildah-tests-debuginfoUpgrade crun-debuginfoUpgrade golang-raceUpgrade criu-develUpgrade golang-miscUpgrade go-toolsetUpgrade delveUpgrade criu-debuginfoUpgrade podman-testsUpgrade containernetworking-plugins-debuginfoUpgrade git-lfs-debugsourceUpgrade slirp4netns-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade golang-srcUpgrade criu-libsUpgrade delve-debuginfoUpgrade libslirp-develUpgrade buildah-testsUpgrade slirp4netnsUpgrade libslirpUpgrade conmonUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade python3-podmanUpgrade fuse-overlayfs-debugsourceUpgrade container-selinuxUpgrade containers-commonUpgrade cockpit-podmanUpgrade podman-debugsourceUpgrade grafanaUpgrade oci-seccomp-bpf-hookUpgrade podman-gvproxyUpgrade podman-remote-debuginfoUpgrade delve-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debugsourceUpgrade aardvark-dnsUpgrade golang-docsUpgrade python3-criuUpgrade grafana-pcpUpgrade fuse-overlayfsUpgrade buildah-debuginfoUpgrade git-lfs-debuginfoUpgrade crunUpgrade skopeoUpgrade golang-binUpgrade golang-testsUpgrade criu-debugsourceUpgrade runcUpgrade podman-debuginfoUpgrade criu-libs-debuginfoUpgrade toolbox-testsUpgrade libslirp-debugsourceUpgrade toolbox-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolbox-debuginfoUpgrade grafana-debuginfoUpgrade podman-pluginsUpgrade criuUpgrade libslirp-debuginfoUpgrade skopeo-debugsourceUpgrade podmanUpgrade podman-catatonitUpgrade podman-gvproxy-debuginfoUpgrade containernetworking-pluginsUpgrade buildahUpgrade conmon-debugsourceUpgrade critNo solution existsUpgrade grafana-pcp-debuginfoUpgrade udicaUpgrade crun-debugsourceUpgrade toolboxUpgrade podman-catatonit-debuginfoUpgrade netavarkUpgrade podman-remote | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade delve-debuginfoUpgrade slirp4netnsUpgrade skopeo-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade skopeo-debugsourceUpgrade grafana-pcp-debuginfoUpgrade criu-debugsourceUpgrade go-toolsetUpgrade toolbox-testsUpgrade grafana-debuginfoUpgrade runc-debugsourceUpgrade buildah-testsUpgrade criuUpgrade criu-debuginfoUpgrade podman-debuginfoUpgrade buildah-debuginfoUpgrade buildahUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfsUpgrade golangUpgrade conmon-debuginfoUpgrade containernetworking-pluginsUpgrade grafana-pcpUpgrade golang-binUpgrade podman-catatonitUpgrade conmon-debugsourceUpgrade podman-remoteUpgrade git-lfs-debuginfoUpgrade skopeoUpgrade criu-libs-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade delve-debugsourceUpgrade libslirp-debugsourceUpgrade toolboxUpgrade criu-develUpgrade grafanaUpgrade runc-debuginfoUpgrade podman-testsUpgrade podman-catatonit-debuginfoUpgrade buildah-debugsourceUpgrade git-lfs-debugsourceUpgrade podman-debugsourceUpgrade slirp4netns-debuginfoUpgrade podman-pluginsUpgrade critUpgrade slirp4netns-debugsourceUpgrade delveUpgrade crunUpgrade podmanUpgrade libslirpUpgrade criu-libsUpgrade containers-commonUpgrade golang-raceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade skopeo-testsUpgrade containernetworking-plugins-debugsourceUpgrade toolbox-debugsourceUpgrade python3-criuUpgrade conmonUpgrade crun-debuginfoUpgrade toolbox-debuginfoUpgrade runcUpgrade podman-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-develUpgrade podman-remote-debuginfoUpgrade libslirp-debuginfoUpgrade git-lfsUpgrade fuse-overlayfs-debuginfoUpgrade crun-debugsource | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 8.1.14 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-opensslUpgrade go1.18Upgrade go1.17-docUpgrade go1.17Upgrade go1.18-openssl-raceUpgrade go1.18-openssl-docUpgrade go1.18-raceUpgrade go1.18-docUpgrade go1.17-race | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.16-srcUpgrade golang-1.16Upgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.16-goUpgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.13-goUpgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.13-src | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub