Improper exposure of client IP addresses in net/http before Go 1.17.12 and Go 1.18.4 can be triggered by calling httputil.ReverseProxy.ServeHTTP with a Request.Header map containing a nil value for the X-Forwarded-For header, which causes ReverseProxy to set the client IP as the value of the X-Forwarded-For header.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-remoteUpgrade cockpit-podmanUpgrade podman-testsUpgrade fuse-overlayfsUpgrade golang-binUpgrade critUpgrade buildahUpgrade golang-docsUpgrade toolbox-testsUpgrade buildah-testsUpgrade container-selinuxUpgrade containernetworking-pluginsUpgrade runcUpgrade delveUpgrade podmanUpgrade udicaUpgrade golang-testsUpgrade podman-catatonitUpgrade crunUpgrade podman-dockerUpgrade criuUpgrade skopeoUpgrade python3-criuUpgrade podman-pluginsUpgrade python3-podmanUpgrade podman-gvproxyUpgrade go-toolsetUpgrade criu-libsUpgrade grafanaUpgrade libslirp-develUpgrade skopeo-testsUpgrade toolboxUpgrade golang-miscUpgrade conmonUpgrade libslirpUpgrade grafana-pcpUpgrade criu-develUpgrade oci-seccomp-bpf-hookUpgrade golang-srcUpgrade golang-raceUpgrade slirp4netnsUpgrade netavarkUpgrade golangUpgrade aardvark-dnsUpgrade containers-commonUpgrade git-lfs | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-github-kr-pty-develUpgrade runcUpgrade golang-testsUpgrade go-srpm-macrosUpgrade golang-github-gorilla-context-develUpgrade golangUpgrade go-rpm-templatesUpgrade golang-binUpgrade golang-docsUpgrade golang-github-godbus-dbus-develUpgrade golist-debuginfoUpgrade golistUpgrade runc-debuginfoUpgrade golang-miscUpgrade golang-sharedUpgrade golang-srcUpgrade go-filesystemUpgrade golang-github-gorilla-mux-develUpgrade golang-googlecode-net-develUpgrade golang-raceUpgrade go-rpm-macrosUpgrade golang-github-syndtr-gocapability-develUpgrade golang-googlecode-sqlite-devel | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-raceUpgrade golangUpgrade golang-miscUpgrade golist-debugsourceUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golistUpgrade golang-testsUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-github-cpuguy83-md2manUpgrade golang-sharedUpgrade golang-docsUpgrade golang-srcUpgrade golang-binUpgrade golist-debuginfoUpgrade compat-golang-github-cpuguy83-md2man-2-devel | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade containernetworking-plugins-debugsourceUpgrade git-lfs-debugsourceUpgrade fuse-overlayfsUpgrade conmonUpgrade podman-dockerUpgrade crunUpgrade libslirpUpgrade containernetworking-plugins-debuginfoUpgrade buildah-testsUpgrade container-selinuxUpgrade libslirp-debugsourceUpgrade skopeo-debuginfoUpgrade toolboxUpgrade python3-podmanUpgrade golang-raceUpgrade podman-gvproxyUpgrade grafanaUpgrade go-toolsetUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade cockpit-podmanUpgrade udicaUpgrade git-lfsUpgrade conmon-debuginfoUpgrade grafana-debuginfoUpgrade toolbox-testsUpgrade grafana-pcp-debuginfoUpgrade netavarkUpgrade slirp4netnsUpgrade crun-debuginfoUpgrade podman-testsUpgrade buildahUpgrade skopeo-debugsourceUpgrade criu-debuginfoUpgrade podmanUpgrade containernetworking-pluginsUpgrade runc-debugsourceUpgrade buildah-debuginfoUpgrade golang-testsUpgrade golangUpgrade podman-catatonit-debuginfoUpgrade delve-debugsourceUpgrade podman-pluginsUpgrade python3-criuUpgrade skopeoUpgrade criu-libs-debuginfoUpgrade criuUpgrade slirp4netns-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-debugsourceUpgrade delve-debuginfoUpgrade podman-plugins-debuginfoUpgrade criu-debugsourceUpgrade skopeo-testsUpgrade golang-miscUpgrade libslirp-develUpgrade golang-binUpgrade delveUpgrade critUpgrade containers-commonUpgrade aardvark-dnsUpgrade toolbox-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade runc-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-remoteUpgrade golang-srcUpgrade podman-debuginfoUpgrade libslirp-debuginfoUpgrade crun-debugsourceUpgrade criu-develUpgrade buildah-tests-debuginfoUpgrade slirp4netns-debuginfoUpgrade runcUpgrade git-lfs-debuginfoUpgrade conmon-debugsourceUpgrade grafana-pcpUpgrade oci-seccomp-bpf-hookUpgrade toolbox-debuginfoUpgrade golang-docsUpgrade podman-gvproxy-debuginfoUpgrade buildah-debugsourceUpgrade criu-libs | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go118Upgrade go117 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade golang-binUpgrade golang-srcUpgrade podmanUpgrade golang-docsUpgrade python3-podmanUpgrade golang-miscUpgrade podman-remoteUpgrade critUpgrade netavarkUpgrade podman-gvproxyUpgrade criuUpgrade golangUpgrade runcUpgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade podman-dockerUpgrade golang-testsUpgrade aardvark-dnsUpgrade cockpit-podmanUpgrade golang-raceUpgrade skopeoUpgrade libslirpUpgrade buildah-testsUpgrade slirp4netnsUpgrade podman-catatonitUpgrade podman-testsUpgrade udicaUpgrade buildahUpgrade grafana-pcpUpgrade libslirp-develUpgrade go-toolsetUpgrade criu-libsUpgrade criu-develUpgrade git-lfsUpgrade conmonUpgrade crunUpgrade skopeo-testsUpgrade container-selinuxUpgrade containers-commonUpgrade grafanaUpgrade oci-seccomp-bpf-hookUpgrade podman-pluginsUpgrade python3-criuUpgrade delve | Aug 4, 2022 | Jul 12, 2022 |
| Redhat Openshift | — | Upgrade cri-toolsUpgrade cri-oUpgrade ignition | Nov 29, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade critUpgrade buildah-tests-debuginfoUpgrade grafana-debuginfoUpgrade buildah-debuginfoUpgrade podman-gvproxyUpgrade podman-dockerUpgrade runc-debugsourceUpgrade crun-debuginfoUpgrade go-toolsetUpgrade toolbox-debugsourceUpgrade podman-catatonitUpgrade buildah-testsUpgrade criu-debugsourceUpgrade libslirpNo solution existsUpgrade conmon-debugsourceUpgrade golangUpgrade python3-criuUpgrade conmonUpgrade udicaUpgrade cockpit-podmanUpgrade grafana-pcp-debuginfoUpgrade runcUpgrade skopeo-debuginfoUpgrade golang-miscUpgrade podman-testsUpgrade aardvark-dnsUpgrade buildahUpgrade toolbox-testsUpgrade podman-gvproxy-debuginfoUpgrade git-lfs-debugsourceUpgrade skopeo-debugsourceUpgrade slirp4netnsUpgrade golang-docsUpgrade criu-debuginfoUpgrade criu-libs-debuginfoUpgrade fuse-overlayfsUpgrade netavarkUpgrade criuUpgrade conmon-debuginfoUpgrade podmanUpgrade git-lfs-debuginfoUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-testsUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-plugins-debuginfoUpgrade delve-debuginfoUpgrade golang-srcUpgrade criu-develUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade grafana-pcpUpgrade container-selinuxUpgrade runc-debuginfoUpgrade delve-debugsourceUpgrade buildah-debugsourceUpgrade crun-debugsourceUpgrade podman-debugsourceUpgrade crunUpgrade toolbox-debuginfoUpgrade python3-podmanUpgrade containernetworking-pluginsUpgrade podman-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-debugsourceUpgrade podman-remoteUpgrade delveUpgrade libslirp-debuginfoUpgrade skopeoUpgrade containers-commonUpgrade golang-binUpgrade slirp4netns-debugsourceUpgrade toolboxUpgrade podman-remote-debuginfoUpgrade skopeo-testsUpgrade podman-pluginsUpgrade podman-debuginfoUpgrade git-lfsUpgrade fuse-overlayfs-debuginfoUpgrade criu-libsUpgrade grafanaUpgrade slirp4netns-debuginfoUpgrade libslirp-develUpgrade golang-race | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade libslirp-debugsourceUpgrade conmon-debuginfoUpgrade conmonUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade grafanaUpgrade podman-plugins-debuginfoUpgrade podman-debugsourceUpgrade skopeo-debugsourceUpgrade slirp4netnsUpgrade buildahUpgrade toolbox-testsUpgrade podman-testsUpgrade git-lfsUpgrade golang-raceUpgrade slirp4netns-debuginfoUpgrade buildah-testsUpgrade crunUpgrade containernetworking-plugins-debugsourceUpgrade grafana-pcp-debuginfoUpgrade runc-debugsourceUpgrade go-toolsetUpgrade buildah-debuginfoUpgrade git-lfs-debugsourceUpgrade libslirpUpgrade skopeo-debuginfoUpgrade crun-debuginfoUpgrade containers-commonUpgrade grafana-pcpUpgrade runc-debuginfoUpgrade podman-pluginsUpgrade podman-remote-debuginfoUpgrade libslirp-debuginfoUpgrade criuUpgrade conmon-debugsourceUpgrade podman-remoteUpgrade oci-seccomp-bpf-hookUpgrade podmanUpgrade grafana-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade delve-debugsourceUpgrade criu-develUpgrade buildah-debugsourceUpgrade podman-catatonitUpgrade delveUpgrade critUpgrade crun-debugsourceUpgrade criu-debugsourceUpgrade containernetworking-pluginsUpgrade podman-catatonit-debuginfoUpgrade git-lfs-debuginfoUpgrade criu-debuginfoUpgrade podman-debuginfoUpgrade skopeoUpgrade runcUpgrade libslirp-develUpgrade golangUpgrade criu-libs-debuginfoUpgrade buildah-tests-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-libsUpgrade toolbox-debuginfoUpgrade golang-binUpgrade toolboxUpgrade toolbox-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debugsourceUpgrade skopeo-testsUpgrade python3-criuUpgrade fuse-overlayfsUpgrade delve-debuginfo | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.2.11 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.18-docUpgrade go1.17-docUpgrade go1.17Upgrade go1.17-raceUpgrade go1.18-opensslUpgrade go1.18-raceUpgrade go1.18-openssl-raceUpgrade go1.18Upgrade go1.18-openssl-doc | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.18-srcUpgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.16-srcUpgrade golang-1.18-goUpgrade golang-1.13Upgrade golang-1.18Upgrade golang-1.16-goUpgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.16Upgrade golang-1.13-goUpgrade golang-1.13-src | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub