Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go 1.18.4 allows HTTP request smuggling if combined with an intermediate server that also improperly fails to reject the header as invalid.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golangUpgrade golang-miscUpgrade aardvark-dnsUpgrade git-lfsUpgrade slirp4netnsUpgrade criu-develUpgrade libslirp-develUpgrade delveUpgrade go-toolsetUpgrade grafana-pcpUpgrade python3-podmanUpgrade golang-raceUpgrade netavarkUpgrade golang-srcUpgrade libslirpUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade toolboxUpgrade skopeo-testsUpgrade grafanaUpgrade podman-gvproxyUpgrade conmonUpgrade runcUpgrade golang-docsUpgrade containernetworking-pluginsUpgrade crunUpgrade podmanUpgrade podman-catatonitUpgrade container-selinuxUpgrade golang-testsUpgrade udicaUpgrade fuse-overlayfsUpgrade podman-remoteUpgrade buildah-testsUpgrade buildahUpgrade criuUpgrade critUpgrade podman-dockerUpgrade podman-pluginsUpgrade skopeoUpgrade python3-criuUpgrade podman-testsUpgrade cockpit-podmanUpgrade toolbox-testsUpgrade golang-bin | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade runcUpgrade runc-debuginfoUpgrade golist-debuginfoUpgrade golang-github-kr-pty-develUpgrade go-rpm-macrosUpgrade golang-binUpgrade golang-googlecode-net-develUpgrade golang-docsUpgrade go-filesystemUpgrade golang-sharedUpgrade golang-github-godbus-dbus-develUpgrade golang-googlecode-sqlite-develUpgrade go-srpm-macrosUpgrade golangUpgrade golang-srcUpgrade go-rpm-templatesUpgrade golang-raceUpgrade golang-github-gorilla-context-develUpgrade golang-miscUpgrade golang-github-gorilla-mux-develUpgrade golang-testsUpgrade golang-github-syndtr-gocapability-develUpgrade golist | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golistUpgrade golang-miscUpgrade golang-testsUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-raceUpgrade golang-github-cpuguy83-md2man-develUpgrade golangUpgrade golang-srcUpgrade golang-github-cpuguy83-md2manUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golist-debugsourceUpgrade golang-binUpgrade golist-debuginfoUpgrade golang-sharedUpgrade golang-docsUpgrade compat-golang-github-cpuguy83-md2man-2-devel | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade podman-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade buildah-testsUpgrade criu-libs-debuginfoUpgrade toolbox-debugsourceUpgrade conmonUpgrade skopeo-debugsourceUpgrade crun-debuginfoUpgrade podman-catatonitUpgrade skopeo-debuginfoUpgrade podman-dockerUpgrade conmon-debuginfoUpgrade libslirp-debugsourceUpgrade podman-testsUpgrade grafana-pcp-debuginfoUpgrade git-lfs-debugsourceUpgrade criuUpgrade podman-gvproxyUpgrade buildahUpgrade golang-raceUpgrade netavarkUpgrade udicaUpgrade toolboxUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolbox-testsUpgrade fuse-overlayfsUpgrade grafanaUpgrade crunUpgrade golang-docsUpgrade grafana-debuginfoUpgrade podman-pluginsUpgrade cockpit-podmanUpgrade python3-podmanUpgrade toolbox-debuginfoUpgrade libslirpUpgrade go-toolsetUpgrade git-lfsUpgrade slirp4netns-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade podmanUpgrade python3-criuUpgrade golangUpgrade fuse-overlayfs-debugsourceUpgrade git-lfs-debuginfoUpgrade delveUpgrade buildah-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade delve-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade aardvark-dnsUpgrade container-selinuxUpgrade libslirp-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-pluginsUpgrade crun-debugsourceUpgrade libslirp-develUpgrade criu-debuginfoUpgrade criu-debugsourceUpgrade runcUpgrade podman-plugins-debuginfoUpgrade runc-debuginfoUpgrade podman-debuginfoUpgrade conmon-debugsourceUpgrade containers-commonUpgrade podman-remoteUpgrade buildah-tests-debuginfoUpgrade skopeo-testsUpgrade skopeoUpgrade golang-miscUpgrade critUpgrade golang-binUpgrade criu-libsUpgrade golang-testsUpgrade golang-srcUpgrade criu-develUpgrade buildah-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade podman-remote-debuginfoUpgrade grafana-pcpUpgrade delve-debugsourceUpgrade slirp4netns-debugsourceUpgrade runc-debugsource | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go117Upgrade go118 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Nov 3, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade skopeoUpgrade python3-criuUpgrade runcUpgrade podman-remoteUpgrade golang-docsUpgrade containernetworking-pluginsUpgrade buildah-testsUpgrade aardvark-dnsUpgrade podmanUpgrade container-selinuxUpgrade golang-testsUpgrade podman-catatonitUpgrade skopeo-testsUpgrade delveUpgrade criu-develUpgrade udicaUpgrade criuUpgrade golang-binUpgrade critUpgrade grafana-pcpUpgrade libslirp-develUpgrade libslirpUpgrade crunUpgrade podman-pluginsUpgrade podman-dockerUpgrade oci-seccomp-bpf-hookUpgrade grafanaUpgrade golang-raceUpgrade containers-commonUpgrade go-toolsetUpgrade cockpit-podmanUpgrade podman-gvproxyUpgrade netavarkUpgrade fuse-overlayfsUpgrade python3-podmanUpgrade golang-miscUpgrade podman-testsUpgrade golangUpgrade criu-libsUpgrade buildahUpgrade slirp4netnsUpgrade golang-srcUpgrade conmonUpgrade git-lfs | Aug 4, 2022 | Jul 12, 2022 |
| Redhat Openshift | — | Upgrade python-scciclientUpgrade python-statsdUpgrade python-pintUpgrade python-webobUpgrade container-selinuxUpgrade pyparsingUpgrade python-oslo-serviceUpgrade python-SecretStorageUpgrade openstack-ironic-inspectorUpgrade python-zakeUpgrade python-oslo-serializationUpgrade python-editorUpgrade python-pynaclUpgrade console-login-helper-messagesUpgrade python-repoze-lruUpgrade python-kazooUpgrade openstack-ironicUpgrade python-munchUpgrade python-os-service-typesUpgrade python-paste-deployUpgrade python-alembicUpgrade python-iso8601Upgrade slirp4netnsUpgrade python-oslo-metricsUpgrade python-oslo-middlewareUpgrade python-oslo-upgradecheckUpgrade python-oslo-versionedobjectsUpgrade python-ironic-libUpgrade python-pecanUpgrade python-jsonpath-rwUpgrade python-pbrUpgrade buildahUpgrade python-migrateUpgrade python-importlib-metadataUpgrade python-sushy-oem-idracUpgrade python-funcsigsUpgrade python-oslo-rootwrapUpgrade python-yappiUpgrade python-amqpUpgrade kata-containersUpgrade python-ironic-prometheus-exporterUpgrade python-pycdlibUpgrade libslirpUpgrade python-pasteUpgrade python-redisUpgrade python-werkzeugUpgrade cri-oUpgrade python-futuristUpgrade python-automatonUpgrade openvswitch2.17Upgrade python-fastenersUpgrade crunUpgrade python-stevedoreUpgrade python-memcachedUpgrade python-dogpile-cacheUpgrade coreos-installerUpgrade python-pyrsistentUpgrade python-oslo-contextUpgrade python-keystonemiddlewareUpgrade python-proliantutilsUpgrade python-cliffUpgrade python-wcwidthUpgrade conmonUpgrade python-waitressUpgrade python-dataclassesUpgrade python-cinderclientUpgrade python-openstacksdkUpgrade openstack-ironic-python-agentUpgrade python-kombuUpgrade python-os-traitsUpgrade python-keystoneclientUpgrade python-oslo-messagingUpgrade libsodiumUpgrade python-routesUpgrade cri-toolsUpgrade python-dracclientUpgrade python-vineUpgrade python-flaskUpgrade python-ifaddrUpgrade criuUpgrade python-oslo-cacheUpgrade python-prometheus_clientUpgrade python-pexpectUpgrade python-oslo-concurrencyUpgrade ovn22.03Upgrade python-packagingUpgrade python-hardwareUpgrade python-soupsieveUpgrade ovn22.06Upgrade python-wsmeUpgrade python-swiftclientUpgrade python-zippUpgrade atomic-openshift-service-idlerUpgrade python-voluptuousUpgrade python-beautifulsoup4Upgrade python-cachetoolsUpgrade skopeoUpgrade python-keystoneauth1Upgrade python-oslo-policyUpgrade python-toozUpgrade python-retryingUpgrade python-coloramaUpgrade python-zeroconfUpgrade rust-bootupdUpgrade podmanUpgrade python-sushyUpgrade python-jsonschemaUpgrade python-tenacityUpgrade python-greenletUpgrade openshift-ansibleUpgrade python-osc-libUpgrade python-decoratorUpgrade python-rfc3986Upgrade ignitionUpgrade python-warlockUpgrade python-msgpackUpgrade runcUpgrade rust-afterburnUpgrade haproxyUpgrade python-sixUpgrade containers-commonUpgrade python-oslo-configUpgrade openshift-kuryrUpgrade python-bcryptUpgrade python-requestsexceptionsUpgrade python-osprofilerUpgrade python-oslo-dbUpgrade pysnmpUpgrade python-appdirsUpgrade python-tempitaUpgrade python-debtcollectorUpgrade python-wraptUpgrade toolboxUpgrade butaneUpgrade python-singledispatchUpgrade openshiftUpgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade python-sqlparseUpgrade python-oslo-utilsUpgrade python-constructUpgrade python-simplejsonUpgrade python-simplegenericUpgrade python-keyringUpgrade openshift-clientsUpgrade python-logutilsUpgrade python-pyperclipUpgrade python-pycadfUpgrade python-glanceclientUpgrade python-oslo-i18nUpgrade python-webtestUpgrade python-oslo-log | Nov 29, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade podman-gvproxy-debuginfoUpgrade delve-debugsourceUpgrade podman-catatonitUpgrade podman-debuginfoUpgrade buildah-debuginfoUpgrade crunUpgrade podman-remoteUpgrade skopeoUpgrade netavarkUpgrade criu-debugsourceUpgrade toolboxUpgrade skopeo-debugsourceUpgrade crun-debugsourceNo solution existsUpgrade podman-pluginsUpgrade golang-testsUpgrade libslirp-debugsourceUpgrade python3-criuUpgrade fuse-overlayfsUpgrade buildah-debugsourceUpgrade critUpgrade criu-libs-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podmanUpgrade podman-catatonit-debuginfoUpgrade udicaUpgrade runcUpgrade golang-binUpgrade podman-remote-debuginfoUpgrade grafana-debuginfoUpgrade toolbox-debuginfoUpgrade criuUpgrade toolbox-debugsourceUpgrade grafana-pcp-debuginfoUpgrade golang-docsUpgrade grafana-pcpUpgrade git-lfs-debuginfoUpgrade toolbox-testsUpgrade buildahUpgrade containernetworking-pluginsUpgrade conmon-debugsourceUpgrade aardvark-dnsUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade container-selinuxUpgrade skopeo-testsUpgrade buildah-testsUpgrade libslirp-develUpgrade slirp4netns-debuginfoUpgrade skopeo-debuginfoUpgrade delve-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade slirp4netns-debugsourceUpgrade conmonUpgrade grafanaUpgrade git-lfs-debugsourceUpgrade go-toolsetUpgrade cockpit-podmanUpgrade golang-srcUpgrade golang-miscUpgrade buildah-tests-debuginfoUpgrade crun-debuginfoUpgrade criu-develUpgrade git-lfsUpgrade delveUpgrade golang-raceUpgrade podman-gvproxyUpgrade podman-testsUpgrade oci-seccomp-bpf-hookUpgrade podman-dockerUpgrade runc-debuginfoUpgrade podman-debugsourceUpgrade criu-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade runc-debugsourceUpgrade libslirpUpgrade golangUpgrade conmon-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-plugins-debuginfoUpgrade containers-commonUpgrade fuse-overlayfs-debugsourceUpgrade criu-libsUpgrade slirp4netnsUpgrade python3-podman | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade libslirpUpgrade git-lfsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade toolboxUpgrade toolbox-debugsourceUpgrade criu-libsUpgrade crunUpgrade delveUpgrade podman-debugsourceUpgrade podman-plugins-debuginfoUpgrade golang-raceUpgrade git-lfs-debugsourceUpgrade containers-commonUpgrade fuse-overlayfs-debuginfoUpgrade grafanaUpgrade critUpgrade podman-pluginsUpgrade slirp4netns-debuginfoUpgrade libslirp-develUpgrade toolbox-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade podman-remote-debuginfoUpgrade skopeoUpgrade crun-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade podman-testsUpgrade runc-debuginfoUpgrade criu-libs-debuginfoUpgrade conmonUpgrade podman-catatonit-debuginfoUpgrade delve-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade runcUpgrade python3-criuUpgrade slirp4netns-debugsourceUpgrade criu-develUpgrade podmanUpgrade buildah-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade libslirp-debuginfoUpgrade libslirp-debugsourceUpgrade crun-debugsourceUpgrade skopeo-testsUpgrade fuse-overlayfsUpgrade buildah-tests-debuginfoUpgrade skopeo-debugsourceUpgrade runc-debugsourceUpgrade go-toolsetUpgrade containernetworking-pluginsUpgrade criu-debuginfoUpgrade grafana-pcpUpgrade toolbox-testsUpgrade skopeo-debuginfoUpgrade grafana-debuginfoUpgrade delve-debuginfoUpgrade slirp4netnsUpgrade git-lfs-debuginfoUpgrade podman-remoteUpgrade golangUpgrade criu-debugsourceUpgrade buildahUpgrade podman-catatonitUpgrade conmon-debugsourceUpgrade podman-debuginfoUpgrade criuUpgrade golang-binUpgrade buildah-testsUpgrade grafana-pcp-debuginfoUpgrade buildah-debuginfoUpgrade conmon-debuginfoUpgrade fuse-overlayfs-debugsource | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.0.5 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.17-docUpgrade go1.18-opensslUpgrade go1.17Upgrade go1.18Upgrade go1.17-raceUpgrade go1.18-docUpgrade go1.18-openssl-raceUpgrade go1.18-openssl-docUpgrade go1.18-race | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.18-goUpgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13Upgrade golang-1.13-srcUpgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.13-goUpgrade golang-1.16-srcUpgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.16Upgrade golang-1.16-goUpgrade golang-1.18Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.13-src (Ubuntu Pro) | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub