The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade container-selinuxUpgrade containers-commonUpgrade criu-develUpgrade toolboxUpgrade podman-remoteUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade podmanUpgrade skopeoUpgrade libslirp-develUpgrade criu-libsUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade podman-dockerUpgrade toolbox-testsUpgrade critUpgrade libslirpUpgrade buildahUpgrade udicaUpgrade conmonUpgrade cockpit-podmanUpgrade python3-podmanUpgrade crunUpgrade podman-gvproxyUpgrade python3-criuUpgrade fuse-overlayfsUpgrade aardvark-dnsUpgrade slirp4netnsUpgrade podman-testsUpgrade buildah-testsUpgrade podman-catatonitUpgrade runcUpgrade criu | Nov 16, 2023 | Jul 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Jul 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade containerd-debuginfoUpgrade runc-debuginfoUpgrade nerdctl-debuginfoUpgrade golang-binUpgrade runcUpgrade golang-sharedUpgrade containerdUpgrade amazon-ssm-agentUpgrade golistUpgrade golang-testsUpgrade golang-srcUpgrade golist-debuginfoUpgrade cni-plugins-debuginfoUpgrade amazon-ssm-agent-debuginfoUpgrade cni-pluginsUpgrade cri-toolsUpgrade nerdctlUpgrade containerd-stressUpgrade golangUpgrade cri-tools-debuginfoUpgrade ecs-initUpgrade golang-docsUpgrade golang-misc | Aug 9, 2023 | Jul 11, 2023 |
| Amazon_linux | — | Upgrade containerdUpgrade golang | Oct 7, 2023 | Jul 11, 2023 |
| Amazon_linux_2023 | — | Upgrade dockerUpgrade oci-add-hooks-debugsourceUpgrade cni-plugins-debuginfoUpgrade golangUpgrade containerd-stress-debuginfoUpgrade runc-debuginfoUpgrade runc-debugsourceUpgrade containerd-debugsourceUpgrade amazon-ssm-agent-debugsourceUpgrade oci-add-hooksUpgrade golang-miscUpgrade docker-debuginfoUpgrade cni-pluginsUpgrade golang-srcUpgrade docker-debugsourceUpgrade runcUpgrade containerd-debuginfoUpgrade golang-testsUpgrade golang-sharedUpgrade golang-docsUpgrade amazon-ecr-credential-helperUpgrade golang-binUpgrade amazon-ssm-agent-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade ecs-initUpgrade containerd-stressUpgrade containerdUpgrade cni-plugins-debugsourceUpgrade nerdctlUpgrade amazon-ssm-agent | Feb 17, 2025 | Jul 11, 2023 |
| Centos_linux | — | Upgrade crun-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-remote-debuginfoUpgrade podman-catatonitUpgrade buildah-debugsourceUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_adminUpgrade podman-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-plugins-debuginfoUpgrade fuse-overlayfsUpgrade aardvark-dnsUpgrade delve-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade rubygem-little-pluggerUpgrade rubygem-mime-types-dataUpgrade rubygem-oauth-ttyUpgrade rubygem-mime-typesUpgrade critUpgrade golang-docsUpgrade skopeoUpgrade libslirp-debugsourceUpgrade criu-debugsourceUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hashieUpgrade rubygem-unf_ext-debuginfoUpgrade criu-libs-debuginfoUpgrade rubygem-multi_jsonUpgrade rubygem-powerbarUpgrade fuse-overlayfs-debuginfoUpgrade containers-commonUpgrade golang-binUpgrade containernetworking-pluginsUpgrade criuUpgrade python3-criuUpgrade podman-catatonit-debuginfoUpgrade rubygem-foreman_maintainUpgrade libslirp-debuginfoUpgrade runcUpgrade toolbox-debugsourceUpgrade podman-remoteUpgrade toolbox-debuginfoUpgrade rubygem-unf_ext-debugsourceUpgrade udicaUpgrade golang-testsUpgrade rubygem-netrcUpgrade toolbox-testsUpgrade satellite-cliUpgrade skopeo-debugsourceUpgrade rubygem-ffiUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podmanUpgrade podman-pluginsUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade slirp4netns-debuginfoUpgrade rubygem-unfUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_templatesUpgrade runc-debugsourceUpgrade toolboxUpgrade crunUpgrade rubygem-domain_nameUpgrade container-selinuxUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unicodeUpgrade libslirpUpgrade golangUpgrade podman-testsUpgrade rubygem-gssapiUpgrade conmonUpgrade rubygem-unicode-debuginfoUpgrade rubygem-unf_extUpgrade rubygem-rest-clientUpgrade rubygem-highlineUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-snaky_hashUpgrade python3-podmanUpgrade rubygem-unicode-debugsourceUpgrade delve-debuginfoUpgrade criu-libsUpgrade conmon-debuginfoUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cliUpgrade buildah-debuginfoUpgrade cockpit-podmanUpgrade buildah-tests-debuginfoUpgrade rubygem-version_gemUpgrade buildahUpgrade python39-pulp_manifestUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade podman-dockerUpgrade oci-seccomp-bpf-hookUpgrade netavarkUpgrade conmon-debugsourceUpgrade rubygem-clampUpgrade slirp4netns-debugsourceUpgrade skopeo-debuginfoUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-ffi-debuginfoUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_tasksUpgrade golang-srcUpgrade containernetworking-plugins-debugsourceUpgrade buildah-testsUpgrade libslirp-develUpgrade golang-raceUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-ffi-debugsourceUpgrade rubygem-amazing_printUpgrade go-toolsetUpgrade foreman-cliUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netnsUpgrade skopeo-testsUpgrade rubygem-localeUpgrade podman-debugsourceUpgrade crun-debuginfoUpgrade podman-gvproxyUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-oauthUpgrade rubygem-jwtUpgrade criu-debuginfoUpgrade rubygem-hammer_cli_katelloUpgrade runc-debuginfoUpgrade criu-develUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade golang-miscUpgrade delve | Nov 1, 2023 | Jul 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | Jul 11, 2023 |
| Freebsd | — | Upgrade go120Upgrade go119 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Jul 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jan 10, 2024 | Jul 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Jan 10, 2024 | Jul 11, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golang-binUpgrade golang | Feb 12, 2024 | Jul 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Jan 10, 2024 | Jul 11, 2023 |
| Oracle_linux | — | Upgrade udicaUpgrade container-selinuxUpgrade python3-criuUpgrade podman-remoteUpgrade cockpit-podmanUpgrade containers-commonUpgrade podman-gvproxyUpgrade critUpgrade buildahUpgrade criu-libsUpgrade podman-dockerUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-pluginsUpgrade aardvark-dnsUpgrade buildah-testsUpgrade runcUpgrade libslirp-develUpgrade podman-pluginsUpgrade fuse-overlayfsUpgrade skopeo-testsUpgrade podman-testsUpgrade python3-podmanUpgrade netavarkUpgrade conmonUpgrade podman-catatonitUpgrade libslirpUpgrade criu-develUpgrade criuUpgrade podmanUpgrade slirp4netnsUpgrade skopeoUpgrade crun | Nov 16, 2023 | Jul 11, 2023 |
| Redhat Openshift | — | Upgrade openshiftUpgrade openshift-clients | Nov 16, 2023 | Jul 11, 2023 |
| Redhat_linux | — | Upgrade criuUpgrade golang-docsUpgrade toolbox-debugsourceUpgrade toolbox-debuginfoUpgrade udicaUpgrade podman-catatonitUpgrade conmonUpgrade podman-catatonit-debuginfoUpgrade delveUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirpUpgrade criu-develUpgrade podman-debugsourceUpgrade skopeo-debuginfoUpgrade podman-pluginsUpgrade skopeo-testsUpgrade slirp4netnsUpgrade slirp4netns-debugsourceUpgrade podman-gvproxyUpgrade crunUpgrade netavarkUpgrade containernetworking-plugins-debugsourceUpgrade toolbox-testsUpgrade python3-podmanUpgrade fuse-overlayfs-debuginfoUpgrade podman-testsUpgrade cockpit-podmanUpgrade golang-raceUpgrade criu-libs-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade skopeoUpgrade libslirp-debugsourceUpgrade buildah-debugsourceUpgrade crun-debuginfoUpgrade toolboxUpgrade podman-dockerUpgrade slirp4netns-debuginfoUpgrade delve-debugsourceNo solution existsUpgrade go-toolsetUpgrade podman-remote-debuginfoUpgrade podman-debuginfoUpgrade podmanUpgrade conmon-debuginfoUpgrade golang-miscUpgrade conmon-debugsourceUpgrade buildahUpgrade golang-testsUpgrade libslirp-debuginfoUpgrade runc-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade skopeo-debugsourceUpgrade golang-binUpgrade buildah-tests-debuginfoUpgrade criu-debuginfoUpgrade crun-debugsourceUpgrade delve-debuginfoUpgrade runc-debuginfoUpgrade criu-debugsourceUpgrade buildah-testsUpgrade libslirp-develUpgrade podman-plugins-debuginfoUpgrade buildah-debuginfoUpgrade fuse-overlayfsUpgrade python3-criuUpgrade golangUpgrade critUpgrade runcUpgrade podman-gvproxy-debuginfoUpgrade podman-remoteUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfs-debugsourceUpgrade golang-srcUpgrade criu-libsUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade aardvark-dns | Nov 1, 2023 | Jul 11, 2023 |
| Rocky_linux | — | Upgrade slirp4netnsUpgrade conmon-debuginfoUpgrade toolbox-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-develUpgrade libdb-debuginfoUpgrade toolboxUpgrade libdb-sql-debuginfoUpgrade runc-debuginfoUpgrade crun-debuginfoUpgrade skopeo-testsUpgrade podman-testsUpgrade netavarkUpgrade podman-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade conmonUpgrade libslirpUpgrade libdb-utils-debuginfoUpgrade skopeo-debugsourceUpgrade libdb-cxxUpgrade buildah-debugsourceUpgrade conmon-debugsourceUpgrade skopeo-debuginfoUpgrade buildah-tests-debuginfoUpgrade podman-gvproxyUpgrade podman-catatonit-debuginfoUpgrade criu-develUpgrade criu-libsUpgrade crunUpgrade libdb-cxx-debuginfoUpgrade criu-debuginfoUpgrade fuse-overlayfsUpgrade criu-debugsourceUpgrade podman-remote-debuginfoUpgrade python3-criuUpgrade buildahUpgrade aardvark-dnsUpgrade skopeoUpgrade libdb-debugsourceUpgrade criu-libs-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-debugsourceUpgrade critUpgrade slirp4netns-debugsourceUpgrade podman-catatonitUpgrade podmanUpgrade containernetworking-plugins-debuginfoUpgrade crun-debugsourceUpgrade libdb-sql-devel-debuginfoUpgrade buildah-debuginfoUpgrade libslirp-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade buildah-testsUpgrade podman-debuginfoUpgrade libslirp-debuginfoUpgrade runcUpgrade toolbox-debugsourceUpgrade toolbox-debuginfoUpgrade podman-remoteUpgrade podman-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criuUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade runc-debugsourceUpgrade containernetworking-pluginsUpgrade slirp4netns-debuginfo | Mar 5, 2024 | Jul 11, 2023 |
| Suse | — | Upgrade go1.20Upgrade go1.19-docUpgrade go1.20-opensslUpgrade go1.20-docUpgrade go1.19Upgrade go1.19-opensslUpgrade go1.19-openssl-docUpgrade go1.19-raceUpgrade go1.19-openssl-raceUpgrade go1.20-raceUpgrade go1.20-openssl-raceUpgrade go1.20-openssl-doc | Jul 18, 2023 | Jul 11, 2023 |
| Ubuntu | — | Upgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.17-srcUpgrade golang-1.18-goUpgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.17Upgrade golang-1.17-go | Oct 11, 2024 | Jul 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub