Improper exposure of client IP addresses in net/http before Go 1.17.12 and Go 1.18.4 can be triggered by calling httputil.ReverseProxy.ServeHTTP with a Request.Header map containing a nil value for the X-Forwarded-For header, which causes ReverseProxy to set the client IP as the value of the X-Forwarded-For header.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade container-selinuxUpgrade criuUpgrade podman-catatonitUpgrade podman-testsUpgrade delveUpgrade containernetworking-pluginsUpgrade runcUpgrade podman-remoteUpgrade golang-binUpgrade udicaUpgrade buildahUpgrade golang-docsUpgrade golang-testsUpgrade python3-criuUpgrade podman-pluginsUpgrade toolbox-testsUpgrade buildah-testsUpgrade fuse-overlayfsUpgrade podmanUpgrade skopeoUpgrade cockpit-podmanUpgrade podman-dockerUpgrade critUpgrade crunUpgrade golang-miscUpgrade toolboxUpgrade libslirpUpgrade grafana-pcpUpgrade slirp4netnsUpgrade aardvark-dnsUpgrade grafanaUpgrade golang-raceUpgrade golangUpgrade git-lfsUpgrade criu-libsUpgrade skopeo-testsUpgrade podman-gvproxyUpgrade containers-commonUpgrade python3-podmanUpgrade go-toolsetUpgrade libslirp-develUpgrade netavarkUpgrade golang-srcUpgrade criu-develUpgrade oci-seccomp-bpf-hookUpgrade conmon | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golangUpgrade golang-testsUpgrade runcUpgrade golang-docsUpgrade golang-github-kr-pty-develUpgrade golang-binUpgrade go-rpm-templatesUpgrade go-srpm-macrosUpgrade golang-github-gorilla-context-develUpgrade golistUpgrade go-rpm-macrosUpgrade golang-sharedUpgrade go-filesystemUpgrade golang-srcUpgrade golang-googlecode-net-develUpgrade golist-debuginfoUpgrade golang-github-gorilla-mux-develUpgrade golang-miscUpgrade runc-debuginfoUpgrade golang-googlecode-sqlite-develUpgrade golang-github-syndtr-gocapability-develUpgrade golang-github-godbus-dbus-develUpgrade golang-race | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-srcUpgrade golang-github-cpuguy83-md2man-develUpgrade golist-debugsourceUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-raceUpgrade golangUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golistUpgrade golang-sharedUpgrade golang-binUpgrade golang-testsUpgrade golang-miscUpgrade golang-github-cpuguy83-md2manUpgrade golist-debuginfoUpgrade golang-docs | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade podman-testsUpgrade conmonUpgrade buildah-testsUpgrade fuse-overlayfsUpgrade git-lfs-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-raceUpgrade podman-gvproxyUpgrade podman-dockerUpgrade skopeo-debugsourceUpgrade grafana-debuginfoUpgrade libslirpUpgrade cockpit-podmanUpgrade udicaUpgrade grafana-pcp-debuginfoUpgrade crun-debuginfoUpgrade conmon-debuginfoUpgrade libslirp-debugsourceUpgrade netavarkUpgrade buildahUpgrade skopeo-debuginfoUpgrade slirp4netnsUpgrade toolboxUpgrade go-toolsetUpgrade containernetworking-plugins-debuginfoUpgrade grafanaUpgrade git-lfsUpgrade container-selinuxUpgrade toolbox-testsUpgrade crunUpgrade python3-podmanUpgrade delveUpgrade runc-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade python3-criuUpgrade podman-remote-debuginfoUpgrade podman-remoteUpgrade golang-srcUpgrade golang-docsUpgrade criu-libs-debuginfoUpgrade skopeoUpgrade git-lfs-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade grafana-pcpUpgrade conmon-debugsourceUpgrade buildah-debugsourceUpgrade podman-plugins-debuginfoUpgrade toolbox-debuginfoUpgrade delve-debugsourceUpgrade golang-testsUpgrade golangUpgrade buildah-debuginfoUpgrade podman-catatonit-debuginfoUpgrade criu-debuginfoUpgrade golang-miscUpgrade libslirp-develUpgrade golang-binUpgrade critUpgrade containers-commonUpgrade aardvark-dnsUpgrade toolbox-debugsourceUpgrade crun-debugsourceUpgrade criu-libsUpgrade runcUpgrade buildah-tests-debuginfoUpgrade runc-debugsourceUpgrade podman-pluginsUpgrade criu-debugsourceUpgrade containernetworking-pluginsUpgrade skopeo-testsUpgrade slirp4netns-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-debuginfoUpgrade delve-debuginfoUpgrade criu-develUpgrade podmanUpgrade libslirp-debuginfoUpgrade criuUpgrade slirp4netns-debugsourceUpgrade podman-debugsourceUpgrade podman-catatonit | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade runcUpgrade podman-remoteUpgrade cockpit-podmanUpgrade fuse-overlayfsUpgrade critUpgrade golang-docsUpgrade podman-gvproxyUpgrade python3-podmanUpgrade buildahUpgrade netavarkUpgrade podman-catatonitUpgrade podman-testsUpgrade golang-raceUpgrade libslirpUpgrade slirp4netnsUpgrade buildah-testsUpgrade golangUpgrade golang-srcUpgrade criuUpgrade podmanUpgrade skopeoUpgrade golang-binUpgrade golang-miscUpgrade aardvark-dnsUpgrade udicaUpgrade containernetworking-pluginsUpgrade podman-dockerUpgrade golang-testsUpgrade git-lfsUpgrade delveUpgrade python3-criuUpgrade grafana-pcpUpgrade criu-develUpgrade container-selinuxUpgrade oci-seccomp-bpf-hookUpgrade go-toolsetUpgrade containers-commonUpgrade conmonUpgrade podman-pluginsUpgrade criu-libsUpgrade libslirp-develUpgrade grafanaUpgrade skopeo-testsUpgrade crun | Aug 4, 2022 | Jul 12, 2022 |
| Redhat Openshift | — | Upgrade ignitionUpgrade cri-toolsUpgrade cri-o | Nov 29, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade slirp4netns-debuginfoUpgrade grafanaUpgrade golang-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade skopeo-testsUpgrade podmanUpgrade fuse-overlayfs-debuginfoUpgrade containers-commonUpgrade podman-debugsourceUpgrade crunUpgrade podman-catatonit-debuginfoUpgrade toolboxUpgrade git-lfs-debuginfoUpgrade golang-srcUpgrade toolbox-debuginfoUpgrade delve-debuginfoUpgrade libslirp-debugsourceUpgrade podman-remote-debuginfoUpgrade runc-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade crun-debugsourceUpgrade grafana-pcpUpgrade container-selinuxUpgrade delve-debugsourceUpgrade buildah-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade python3-podmanUpgrade libslirp-debuginfoUpgrade podman-pluginsUpgrade podman-debuginfoUpgrade criu-libsUpgrade containernetworking-plugins-debuginfoUpgrade libslirp-develUpgrade podman-remoteUpgrade delveUpgrade skopeoUpgrade git-lfsUpgrade criu-develUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-plugins-debuginfoUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade golang-raceUpgrade golang-binUpgrade criuUpgrade slirp4netnsUpgrade conmon-debuginfoUpgrade libslirpUpgrade conmonUpgrade go-toolsetUpgrade criu-debuginfoNo solution existsUpgrade buildahUpgrade python3-criuUpgrade fuse-overlayfsUpgrade netavarkUpgrade cockpit-podmanUpgrade podman-gvproxyUpgrade skopeo-debugsourceUpgrade critUpgrade podman-gvproxy-debuginfoUpgrade git-lfs-debugsourceUpgrade grafana-pcp-debuginfoUpgrade golangUpgrade golang-miscUpgrade skopeo-debuginfoUpgrade runcUpgrade podman-dockerUpgrade buildah-tests-debuginfoUpgrade buildah-debuginfoUpgrade conmon-debugsourceUpgrade udicaUpgrade grafana-debuginfoUpgrade criu-libs-debuginfoUpgrade aardvark-dnsUpgrade golang-docsUpgrade buildah-testsUpgrade podman-catatonitUpgrade crun-debuginfoUpgrade podman-testsUpgrade runc-debugsourceUpgrade criu-debugsourceUpgrade toolbox-testsUpgrade toolbox-debugsource | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade podman-plugins-debuginfoUpgrade runc-debugsourceUpgrade skopeo-debuginfoUpgrade git-lfs-debugsourceUpgrade libslirp-debugsourceUpgrade golang-raceUpgrade conmon-debuginfoUpgrade grafana-pcp-debuginfoUpgrade git-lfsUpgrade slirp4netns-debuginfoUpgrade go-toolsetUpgrade conmonUpgrade skopeo-debugsourceUpgrade libslirpUpgrade podman-testsUpgrade slirp4netnsUpgrade grafanaUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-debugsourceUpgrade toolbox-testsUpgrade crun-debuginfoUpgrade buildah-debuginfoUpgrade buildah-testsUpgrade crunUpgrade buildahUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade git-lfs-debuginfoUpgrade criu-debuginfoUpgrade delveUpgrade critUpgrade criu-libsUpgrade toolbox-debuginfoUpgrade toolboxUpgrade toolbox-debugsourceUpgrade libslirp-debuginfoUpgrade containers-commonUpgrade grafana-pcpUpgrade containernetworking-pluginsUpgrade podman-debuginfoUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade grafana-debuginfoUpgrade crun-debugsourceUpgrade criu-debugsourceUpgrade criu-libs-debuginfoUpgrade skopeoUpgrade runcUpgrade libslirp-develUpgrade golangUpgrade conmon-debugsourceUpgrade podmanUpgrade fuse-overlayfs-debugsourceUpgrade podman-remote-debuginfoUpgrade podman-pluginsUpgrade delve-debugsourceUpgrade criu-develUpgrade runc-debuginfoUpgrade buildah-debugsourceUpgrade podman-remoteUpgrade fuse-overlayfs-debuginfoUpgrade python3-criuUpgrade fuse-overlayfsUpgrade delve-debuginfoUpgrade criuUpgrade containernetworking-plugins-debuginfoUpgrade buildah-tests-debuginfoUpgrade slirp4netns-debugsourceUpgrade skopeo-testsUpgrade golang-bin | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.2.11Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.1.14 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.17-docUpgrade go1.17Upgrade go1.17-raceUpgrade go1.18-docUpgrade go1.18-raceUpgrade go1.18-opensslUpgrade go1.18-openssl-docUpgrade go1.18-openssl-raceUpgrade go1.18 | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13-goUpgrade golang-1.13-srcUpgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.16Upgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.18Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.16-goUpgrade golang-1.18-goUpgrade golang-1.16-srcUpgrade golang-1.13 | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub