Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go 1.18.4 allows HTTP request smuggling if combined with an intermediate server that also improperly fails to reject the header as invalid.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-dockerUpgrade podmanUpgrade criuUpgrade podman-testsUpgrade podman-pluginsUpgrade container-selinuxUpgrade python3-criuUpgrade containernetworking-pluginsUpgrade crunUpgrade udicaUpgrade golang-binUpgrade golang-docsUpgrade skopeoUpgrade buildah-testsUpgrade runcUpgrade buildahUpgrade golang-testsUpgrade cockpit-podmanUpgrade critUpgrade toolbox-testsUpgrade fuse-overlayfsUpgrade podman-remoteUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade golang-raceUpgrade slirp4netnsUpgrade containers-commonUpgrade toolboxUpgrade criu-libsUpgrade grafanaUpgrade netavarkUpgrade go-toolsetUpgrade golang-srcUpgrade golangUpgrade python3-podmanUpgrade conmonUpgrade aardvark-dnsUpgrade libslirpUpgrade git-lfsUpgrade grafana-pcpUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade golang-miscUpgrade delveUpgrade criu-develUpgrade libslirp-devel | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade go-filesystemUpgrade golang-binUpgrade runcUpgrade runc-debuginfoUpgrade golang-github-godbus-dbus-develUpgrade golang-sharedUpgrade golang-docsUpgrade go-rpm-macrosUpgrade golist-debuginfoUpgrade golang-googlecode-net-develUpgrade go-rpm-templatesUpgrade golang-github-gorilla-context-develUpgrade golang-raceUpgrade golangUpgrade golang-googlecode-sqlite-develUpgrade golang-testsUpgrade golang-github-syndtr-gocapability-develUpgrade go-srpm-macrosUpgrade golang-srcUpgrade golang-miscUpgrade golistUpgrade golang-github-gorilla-mux-develUpgrade golang-github-kr-pty-devel | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golistUpgrade golang-github-cpuguy83-md2man-develUpgrade golangUpgrade golang-testsUpgrade golang-srcUpgrade golang-github-cpuguy83-md2manUpgrade golang-miscUpgrade golang-raceUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-sharedUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golist-debugsourceUpgrade golang-binUpgrade golang-docsUpgrade golist-debuginfo | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade grafana-debuginfoUpgrade git-lfs-debugsourceUpgrade podman-dockerUpgrade golang-docsUpgrade podman-debugsourceUpgrade grafana-pcp-debuginfoUpgrade podman-pluginsUpgrade crunUpgrade grafanaUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade cockpit-podmanUpgrade fuse-overlayfsUpgrade slirp4netnsUpgrade buildahUpgrade podman-gvproxyUpgrade containernetworking-plugins-debuginfoUpgrade git-lfsUpgrade python3-podmanUpgrade toolbox-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-testsUpgrade libslirpUpgrade conmon-debuginfoUpgrade go-toolsetUpgrade criuUpgrade libslirp-debugsourceUpgrade netavarkUpgrade toolbox-testsUpgrade toolbox-debugsourceUpgrade golang-raceUpgrade crun-debuginfoUpgrade skopeo-debugsourceUpgrade skopeo-debuginfoUpgrade udicaUpgrade toolboxUpgrade conmonUpgrade containernetworking-plugins-debugsourceUpgrade buildah-testsUpgrade criu-libs-debuginfoUpgrade podman-catatonitUpgrade criu-debugsourceUpgrade golang-binUpgrade libslirp-develUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade grafana-pcpUpgrade python3-criuUpgrade critUpgrade podman-catatonit-debuginfoUpgrade criu-libsUpgrade podman-remoteUpgrade podman-gvproxy-debuginfoUpgrade libslirp-debuginfoUpgrade container-selinuxUpgrade containernetworking-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade crun-debugsourceUpgrade skopeoUpgrade golang-miscUpgrade git-lfs-debuginfoUpgrade delveUpgrade aardvark-dnsUpgrade runcUpgrade podman-plugins-debuginfoUpgrade criu-debuginfoUpgrade runc-debugsourceUpgrade golang-testsUpgrade golang-srcUpgrade criu-develUpgrade buildah-debuginfoUpgrade runc-debuginfoUpgrade podman-debuginfoUpgrade conmon-debugsourceUpgrade golangUpgrade fuse-overlayfs-debugsourceUpgrade containers-commonUpgrade slirp4netns-debugsourceUpgrade delve-debugsourceUpgrade buildah-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade delve-debuginfoUpgrade podmanUpgrade buildah-tests-debuginfoUpgrade skopeo-tests | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go117Upgrade go118 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Nov 3, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade grafanaUpgrade libslirp-develUpgrade buildahUpgrade git-lfsUpgrade podman-dockerUpgrade oci-seccomp-bpf-hookUpgrade golang-miscUpgrade slirp4netnsUpgrade conmonUpgrade libslirpUpgrade netavarkUpgrade podman-gvproxyUpgrade podman-testsUpgrade containers-commonUpgrade crunUpgrade cockpit-podmanUpgrade criu-libsUpgrade golangUpgrade go-toolsetUpgrade fuse-overlayfsUpgrade golang-srcUpgrade golang-raceUpgrade podman-pluginsUpgrade python3-podmanUpgrade golang-testsUpgrade golang-docsUpgrade podman-catatonitUpgrade podman-remoteUpgrade skopeo-testsUpgrade delveUpgrade golang-binUpgrade critUpgrade containernetworking-pluginsUpgrade aardvark-dnsUpgrade buildah-testsUpgrade skopeoUpgrade runcUpgrade python3-criuUpgrade container-selinuxUpgrade criu-develUpgrade grafana-pcpUpgrade podmanUpgrade criuUpgrade udica | Aug 4, 2022 | Jul 12, 2022 |
| Redhat Openshift | — | Upgrade python-ironic-libUpgrade python-alembicUpgrade openstack-ironicUpgrade python-amqpUpgrade python-dogpile-cacheUpgrade python-keystoneclientUpgrade python-jsonpath-rwUpgrade python-werkzeugUpgrade python-memcachedUpgrade python-oslo-serviceUpgrade python-statsdUpgrade libsodiumUpgrade python-editorUpgrade python-migrateUpgrade libslirpUpgrade python-oslo-middlewareUpgrade conmonUpgrade python-os-traitsUpgrade openvswitch2.17Upgrade python-routesUpgrade python-oslo-upgradecheckUpgrade slirp4netnsUpgrade python-oslo-metricsUpgrade python-oslo-serializationUpgrade python-fastenersUpgrade console-login-helper-messagesUpgrade pyparsingUpgrade python-paste-deployUpgrade buildahUpgrade python-oslo-rootwrapUpgrade python-munchUpgrade python-pycdlibUpgrade python-cinderclientUpgrade python-pynaclUpgrade python-pintUpgrade python-sushy-oem-idracUpgrade python-pasteUpgrade python-scciclientUpgrade cri-oUpgrade openstack-ironic-inspectorUpgrade python-automatonUpgrade python-zakeUpgrade python-oslo-messagingUpgrade kata-containersUpgrade python-funcsigsUpgrade python-os-service-typesUpgrade python-futuristUpgrade python-cliffUpgrade container-selinuxUpgrade python-wcwidthUpgrade python-oslo-contextUpgrade python-stevedoreUpgrade python-keystonemiddlewareUpgrade python-proliantutilsUpgrade python-webobUpgrade python-openstacksdkUpgrade python-iso8601Upgrade python-kombuUpgrade python-kazooUpgrade python-oslo-versionedobjectsUpgrade python-waitressUpgrade python-dataclassesUpgrade python-yappiUpgrade python-importlib-metadataUpgrade crunUpgrade python-repoze-lruUpgrade cri-toolsUpgrade python-pbrUpgrade python-pyrsistentUpgrade python-toozUpgrade python-dracclientUpgrade coreos-installerUpgrade python-ironic-prometheus-exporterUpgrade python-jsonschemaUpgrade pysnmpUpgrade python-msgpackUpgrade python-rfc3986Upgrade python-oslo-configUpgrade python-constructUpgrade python-SecretStorageUpgrade python-redisUpgrade python-appdirsUpgrade python-swiftclientUpgrade openshift-ansibleUpgrade python-pexpectUpgrade python-osprofilerUpgrade python-tempitaUpgrade toolboxUpgrade ovn22.03Upgrade rust-bootupdUpgrade openshiftUpgrade python-pycadfUpgrade rust-afterburnUpgrade python-keyringUpgrade python-glanceclientUpgrade python-logutilsUpgrade python-voluptuousUpgrade python-tenacityUpgrade python-oslo-i18nUpgrade python-sushyUpgrade python-oslo-cacheUpgrade python-greenletUpgrade python-decoratorUpgrade python-retryingUpgrade python-osc-libUpgrade python-cachetoolsUpgrade python-webtestUpgrade python-hardwareUpgrade podmanUpgrade python-pyperclipUpgrade python-oslo-utilsUpgrade python-pecanUpgrade openstack-ironic-python-agentUpgrade python-debtcollectorUpgrade criuUpgrade python-simplejsonUpgrade python-wsmeUpgrade python-oslo-logUpgrade fuse-overlayfsUpgrade python-bcryptUpgrade python-wraptUpgrade butaneUpgrade python-oslo-dbUpgrade openshift-kuryrUpgrade python-singledispatchUpgrade python-zeroconfUpgrade python-vineUpgrade python-simplegenericUpgrade python-soupsieveUpgrade python-keystoneauth1Upgrade python-ifaddrUpgrade python-flaskUpgrade ovn22.06Upgrade python-oslo-concurrencyUpgrade haproxyUpgrade python-oslo-policyUpgrade python-coloramaUpgrade containers-commonUpgrade python-packagingUpgrade runcUpgrade openshift-clientsUpgrade python-beautifulsoup4Upgrade skopeoUpgrade python-sixUpgrade containernetworking-pluginsUpgrade ignitionUpgrade python-warlockUpgrade python-zippUpgrade atomic-openshift-service-idlerUpgrade python-sqlparseUpgrade python-prometheus_clientUpgrade python-requestsexceptions | Nov 29, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade podman-debuginfoUpgrade golang-testsUpgrade toolbox-debugsourceUpgrade buildah-debuginfoUpgrade libslirp-debugsourceUpgrade git-lfs-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade criu-debugsourceUpgrade golang-docsUpgrade grafana-pcp-debuginfoUpgrade podman-remoteUpgrade conmon-debugsourceUpgrade aardvark-dnsNo solution existsUpgrade crunUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-debuginfoUpgrade toolbox-testsUpgrade containernetworking-pluginsUpgrade podman-catatonit-debuginfoUpgrade toolboxUpgrade criu-libs-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade fuse-overlayfsUpgrade skopeoUpgrade golang-binUpgrade podman-catatonitUpgrade python3-criuUpgrade buildah-debugsourceUpgrade buildahUpgrade criuUpgrade podman-pluginsUpgrade toolbox-debuginfoUpgrade grafana-pcpUpgrade grafana-debuginfoUpgrade podman-remote-debuginfoUpgrade netavarkUpgrade skopeo-debugsourceUpgrade crun-debugsourceUpgrade critUpgrade delve-debugsourceUpgrade podmanUpgrade runcUpgrade udicaUpgrade libslirpUpgrade skopeo-testsUpgrade grafanaUpgrade golang-raceUpgrade golangUpgrade fuse-overlayfs-debugsourceUpgrade git-lfs-debugsourceUpgrade conmon-debuginfoUpgrade podman-debugsourceUpgrade podman-testsUpgrade containernetworking-plugins-debuginfoUpgrade criu-debuginfoUpgrade buildah-tests-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade conmonUpgrade podman-dockerUpgrade golang-miscUpgrade slirp4netns-debugsourceUpgrade slirp4netns-debuginfoUpgrade buildah-testsUpgrade skopeo-debuginfoUpgrade delve-debuginfoUpgrade criu-libsUpgrade golang-srcUpgrade libslirp-develUpgrade runc-debuginfoUpgrade container-selinuxUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-plugins-debugsourceUpgrade go-toolsetUpgrade runc-debugsourceUpgrade criu-develUpgrade cockpit-podmanUpgrade python3-podmanUpgrade podman-plugins-debuginfoUpgrade git-lfsUpgrade crun-debuginfoUpgrade containers-commonUpgrade slirp4netnsUpgrade delveUpgrade podman-gvproxy | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade delve-debugsourceUpgrade grafanaUpgrade buildah-debugsourceUpgrade criu-libs-debuginfoUpgrade podman-testsUpgrade conmonUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-plugins-debuginfoUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade python3-criuUpgrade skopeoUpgrade containernetworking-plugins-debuginfoUpgrade runcUpgrade toolbox-debuginfoUpgrade podman-catatonit-debuginfoUpgrade delveUpgrade podman-debugsourceUpgrade podman-pluginsUpgrade containernetworking-plugins-debugsourceUpgrade skopeo-testsUpgrade git-lfsUpgrade libslirp-debuginfoUpgrade crun-debuginfoUpgrade criu-libsUpgrade git-lfs-debugsourceUpgrade libslirpUpgrade fuse-overlayfs-debuginfoUpgrade toolboxUpgrade slirp4netns-debuginfoUpgrade slirp4netns-debugsourceUpgrade crunUpgrade toolbox-debugsourceUpgrade critUpgrade golang-raceUpgrade libslirp-debugsourceUpgrade podmanUpgrade containers-commonUpgrade criu-develUpgrade crun-debugsourceUpgrade grafana-pcp-debuginfoUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade grafana-pcpUpgrade conmon-debugsourceUpgrade containernetworking-pluginsUpgrade buildah-tests-debuginfoUpgrade buildah-debuginfoUpgrade toolbox-testsUpgrade podman-debuginfoUpgrade criu-debuginfoUpgrade buildah-testsUpgrade fuse-overlayfs-debugsourceUpgrade conmon-debuginfoUpgrade criuUpgrade go-toolsetUpgrade git-lfs-debuginfoUpgrade podman-remoteUpgrade golangUpgrade golang-binUpgrade delve-debuginfoUpgrade slirp4netnsUpgrade grafana-debuginfoUpgrade criu-debugsourceUpgrade buildahUpgrade skopeo-debugsourceUpgrade skopeo-debuginfoUpgrade runc-debugsource | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.1.14 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-openssl-docUpgrade go1.18-raceUpgrade go1.17-raceUpgrade go1.18-docUpgrade go1.18-openssl-raceUpgrade go1.17Upgrade go1.18-opensslUpgrade go1.17-docUpgrade go1.18 | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.13Upgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13-goUpgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13-srcUpgrade golang-1.18-srcUpgrade golang-1.18-goUpgrade golang-1.18Upgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.16Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.16-goUpgrade golang-1.16-src | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub