The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade containernetworking-pluginsUpgrade criu-develUpgrade netavarkUpgrade podmanUpgrade criu-libsUpgrade toolboxUpgrade podman-remoteUpgrade skopeo-testsUpgrade skopeoUpgrade podman-pluginsUpgrade container-selinuxUpgrade cockpit-podmanUpgrade runcUpgrade udicaUpgrade python3-podmanUpgrade podman-catatonitUpgrade buildah-testsUpgrade conmonUpgrade slirp4netnsUpgrade criuUpgrade crunUpgrade critUpgrade podman-dockerUpgrade python3-criuUpgrade podman-testsUpgrade aardvark-dnsUpgrade fuse-overlayfsUpgrade libslirpUpgrade buildahUpgrade podman-gvproxyUpgrade toolbox-tests | Nov 16, 2023 | Jul 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Jul 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade ecs-initUpgrade golang-miscUpgrade cni-pluginsUpgrade golang-docsUpgrade cri-toolsUpgrade cri-tools-debuginfoUpgrade containerd-stressUpgrade golangUpgrade nerdctlUpgrade containerd-debuginfoUpgrade runcUpgrade cni-plugins-debuginfoUpgrade runc-debuginfoUpgrade golist-debuginfoUpgrade golang-sharedUpgrade amazon-ssm-agent-debuginfoUpgrade golang-binUpgrade containerdUpgrade golistUpgrade amazon-ssm-agentUpgrade golang-srcUpgrade golang-testsUpgrade nerdctl-debuginfo | Aug 9, 2023 | Jul 11, 2023 |
| Amazon_linux | — | Upgrade containerdUpgrade golang | Oct 7, 2023 | Jul 11, 2023 |
| Amazon_linux_2023 | — | Upgrade oci-add-hooks-debugsourceUpgrade oci-add-hooksUpgrade golangUpgrade runc-debugsourceUpgrade docker-debuginfoUpgrade containerd-debugsourceUpgrade runc-debuginfoUpgrade cni-pluginsUpgrade containerd-stress-debuginfoUpgrade docker-debugsourceUpgrade amazon-ssm-agent-debugsourceUpgrade dockerUpgrade golang-srcUpgrade cni-plugins-debuginfoUpgrade golang-miscUpgrade containerd-debuginfoUpgrade amazon-ssm-agentUpgrade cni-plugins-debugsourceUpgrade golang-sharedUpgrade runcUpgrade nerdctlUpgrade golang-binUpgrade amazon-ssm-agent-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade amazon-ecr-credential-helperUpgrade ecs-initUpgrade containerd-stressUpgrade containerdUpgrade golang-docsUpgrade golang-tests | Feb 17, 2025 | Jul 11, 2023 |
| Centos_linux | — | Upgrade libslirp-debugsourceUpgrade rubygem-hashieUpgrade aardvark-dnsUpgrade rubygem-oauth-ttyUpgrade runcUpgrade toolbox-testsUpgrade rubygem-ffiUpgrade rubygem-mime-typesUpgrade slirp4netns-debuginfoUpgrade containernetworking-pluginsUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade python3-criuUpgrade podmanUpgrade podman-pluginsUpgrade rubygem-mime-types-dataUpgrade rubygem-unf_ext-debugsourceUpgrade runc-debugsourceUpgrade toolbox-debugsourceUpgrade rubygem-unicode-display_widthUpgrade toolbox-debuginfoUpgrade libslirp-debuginfoUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unfUpgrade toolboxUpgrade fuse-overlayfs-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildah-debugsourceUpgrade podman-catatonit-debuginfoUpgrade rubygem-foreman_maintainUpgrade satellite-cliUpgrade skopeo-debugsourceUpgrade podman-catatonitUpgrade podman-remoteUpgrade udicaUpgrade podman-remote-debuginfoUpgrade criuUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-little-pluggerUpgrade rubygem-multi_jsonUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_openscapUpgrade skopeoUpgrade rubygem-netrcUpgrade criu-debugsourceUpgrade criu-libs-debuginfoUpgrade delve-debugsourceUpgrade golang-testsUpgrade critUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade rubygem-powerbarUpgrade satellite-maintainUpgrade fuse-overlayfs-debuginfoUpgrade golang-binUpgrade containers-commonUpgrade podman-gvproxy-debuginfoUpgrade podman-plugins-debuginfoUpgrade rubygem-hammer_cli_foremanUpgrade golang-docsUpgrade podman-debuginfoUpgrade crun-debugsourceUpgrade slirp4netns-debugsourceUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade buildah-tests-debuginfoUpgrade crun-debuginfoUpgrade buildah-testsUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_tasksUpgrade podman-gvproxyUpgrade rubygem-ffi-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade rubygem-version_gemUpgrade podman-testsUpgrade rubygem-gssapiUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade golang-miscUpgrade delveUpgrade crunUpgrade criu-develUpgrade container-selinuxUpgrade rubygem-loggingUpgrade rubygem-oauthUpgrade cockpit-podmanUpgrade rubygem-jwtUpgrade podman-debugsourceUpgrade criu-debuginfoUpgrade go-toolsetUpgrade foreman-cliUpgrade containernetworking-plugins-debuginfoUpgrade rubygem-localeUpgrade rubygem-amazing_printUpgrade buildahUpgrade python39-pulp_manifestUpgrade satellite-cloneUpgrade netavarkUpgrade conmon-debugsourceUpgrade rubygem-clampUpgrade skopeo-testsUpgrade slirp4netnsUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-ffi-debugsourceUpgrade libslirp-develUpgrade golang-raceUpgrade rubygem-domain_nameUpgrade podman-dockerUpgrade oci-seccomp-bpf-hookUpgrade golang-srcUpgrade rubygem-unicode-debuginfoUpgrade rubygem-unf_extUpgrade rubygem-rest-clientUpgrade rubygem-highlineUpgrade rubygem-apipie-bindingsUpgrade delve-debuginfoUpgrade criu-libsUpgrade rubygem-unicode-debugsourceUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cliUpgrade rubygem-snaky_hashUpgrade python3-podmanUpgrade conmon-debuginfoUpgrade buildah-debuginfoUpgrade skopeo-debuginfoUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade libslirpUpgrade conmonUpgrade runc-debuginfoUpgrade rubygem-unicodeUpgrade golang | Nov 1, 2023 | Jul 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | Jul 11, 2023 |
| Freebsd | — | Upgrade go119Upgrade go120 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Jul 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jan 10, 2024 | Jul 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jan 10, 2024 | Jul 11, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golangUpgrade golang-binUpgrade golang-src | Feb 12, 2024 | Jul 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jan 10, 2024 | Jul 11, 2023 |
| Oracle_linux | — | Upgrade oci-seccomp-bpf-hookUpgrade buildah-testsUpgrade buildahUpgrade cockpit-podmanUpgrade aardvark-dnsUpgrade containernetworking-pluginsUpgrade critUpgrade python3-criuUpgrade criu-libsUpgrade podman-dockerUpgrade podman-gvproxyUpgrade runcUpgrade containers-commonUpgrade podman-remoteUpgrade udicaUpgrade container-selinuxUpgrade podman-testsUpgrade skopeo-testsUpgrade fuse-overlayfsUpgrade libslirp-develUpgrade conmonUpgrade podman-catatonitUpgrade libslirpUpgrade podman-pluginsUpgrade python3-podmanUpgrade podmanUpgrade netavarkUpgrade crunUpgrade criuUpgrade criu-develUpgrade skopeoUpgrade slirp4netns | Nov 16, 2023 | Jul 11, 2023 |
| Redhat Openshift | — | Upgrade openshiftUpgrade openshift-clients | Nov 16, 2023 | Jul 11, 2023 |
| Redhat_linux | — | Upgrade containers-commonUpgrade podman-remoteUpgrade criu-libsUpgrade podman-gvproxy-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade criu-debugsourceUpgrade runc-debuginfoUpgrade runc-debugsourceUpgrade runcUpgrade buildah-testsUpgrade buildahUpgrade fuse-overlayfs-debugsourceUpgrade buildah-tests-debuginfoUpgrade criu-debuginfoUpgrade libslirp-debuginfoUpgrade delve-debuginfoUpgrade golangUpgrade golang-binUpgrade crun-debugsourceUpgrade go-toolsetUpgrade podman-plugins-debuginfoUpgrade fuse-overlayfsUpgrade buildah-debuginfoUpgrade critUpgrade python3-criuUpgrade skopeo-debugsourceUpgrade golang-miscUpgrade podmanUpgrade golang-testsUpgrade aardvark-dnsUpgrade conmon-debugsourceUpgrade podman-remote-debuginfoUpgrade podman-debuginfoUpgrade container-selinuxUpgrade libslirp-develUpgrade conmon-debuginfoUpgrade golang-srcUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade golang-docsUpgrade podman-testsUpgrade crunUpgrade delveUpgrade fuse-overlayfs-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-raceUpgrade podman-catatonit-debuginfoUpgrade netavarkUpgrade udicaUpgrade conmonUpgrade skopeo-debuginfoUpgrade slirp4netns-debugsourceUpgrade toolbox-testsUpgrade libslirpUpgrade podman-pluginsUpgrade skopeoUpgrade podman-debugsourceUpgrade skopeo-testsUpgrade slirp4netns-debuginfoUpgrade criu-develUpgrade crun-debuginfoUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade buildah-debugsourceUpgrade podman-dockerUpgrade cockpit-podmanNo solution existsUpgrade delve-debugsourceUpgrade podman-catatonitUpgrade python3-podmanUpgrade toolbox-debuginfoUpgrade libslirp-debugsourceUpgrade toolboxUpgrade toolbox-debugsourceUpgrade criu-libs-debuginfoUpgrade criu | Nov 1, 2023 | Jul 11, 2023 |
| Rocky_linux | — | Upgrade containernetworking-plugins-debugsourceUpgrade crun-debuginfoUpgrade runc-debuginfoUpgrade toolbox-testsUpgrade skopeo-testsUpgrade slirp4netnsUpgrade conmonUpgrade libdb-debuginfoUpgrade conmon-debuginfoUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfsUpgrade libdb-cxx-debuginfoUpgrade skopeo-debugsourceUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debugsourceUpgrade libslirpUpgrade libdb-cxxUpgrade podman-pluginsUpgrade podman-testsUpgrade netavarkUpgrade criu-develUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-libsUpgrade toolboxUpgrade podman-gvproxyUpgrade skopeo-debuginfoUpgrade crunUpgrade libdb-utils-debuginfoUpgrade libslirp-develUpgrade libdb-sql-debuginfoUpgrade conmon-debugsourceUpgrade criu-debuginfoUpgrade podman-plugins-debuginfoUpgrade buildahUpgrade criu-libs-debuginfoUpgrade critUpgrade slirp4netns-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade toolbox-debugsourceUpgrade toolbox-debuginfoUpgrade runcUpgrade podman-remoteUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criuUpgrade containers-commonUpgrade python3-criuUpgrade aardvark-dnsUpgrade libdb-debugsourceUpgrade criu-debugsourceUpgrade skopeoUpgrade podman-debugsourceUpgrade podman-catatonitUpgrade crun-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade podmanUpgrade libdb-sql-devel-debuginfoUpgrade buildah-debuginfoUpgrade podman-debuginfoUpgrade libslirp-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade libslirp-debugsourceUpgrade buildah-testsUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-pluginsUpgrade podman-remote-debuginfoUpgrade slirp4netns-debuginfoUpgrade runc-debugsource | Mar 5, 2024 | Jul 11, 2023 |
| Suse | — | Upgrade go1.19-opensslUpgrade go1.19-openssl-docUpgrade go1.20-opensslUpgrade go1.20Upgrade go1.19-docUpgrade go1.20-docUpgrade go1.19Upgrade go1.19-raceUpgrade go1.19-openssl-raceUpgrade go1.20-openssl-docUpgrade go1.20-raceUpgrade go1.20-openssl-race | Jul 18, 2023 | Jul 11, 2023 |
| Ubuntu | — | Upgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.17-srcUpgrade golang-1.18-goUpgrade golang-1.18-srcUpgrade golang-1.17-goUpgrade golang-1.17Upgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.18 | Oct 11, 2024 | Jul 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub