The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade containers-commonUpgrade netavarkUpgrade podmanUpgrade containernetworking-pluginsUpgrade skopeoUpgrade container-selinuxUpgrade libslirp-develUpgrade podman-remoteUpgrade toolboxUpgrade criu-libsUpgrade criu-develUpgrade podman-pluginsUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hookUpgrade udicaUpgrade podman-gvproxyUpgrade cockpit-podmanUpgrade conmonUpgrade podman-dockerUpgrade python3-podmanUpgrade criuUpgrade buildah-testsUpgrade podman-testsUpgrade crunUpgrade libslirpUpgrade fuse-overlayfsUpgrade critUpgrade toolbox-testsUpgrade slirp4netnsUpgrade podman-catatonitUpgrade runcUpgrade aardvark-dnsUpgrade buildahUpgrade python3-criu | Nov 16, 2023 | Jul 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Jul 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golang-srcUpgrade amazon-ssm-agent-debuginfoUpgrade golang-binUpgrade golang-sharedUpgrade containerdUpgrade golist-debuginfoUpgrade golang-testsUpgrade runcUpgrade golistUpgrade containerd-debuginfoUpgrade amazon-ssm-agentUpgrade nerdctl-debuginfoUpgrade cni-plugins-debuginfoUpgrade runc-debuginfoUpgrade nerdctlUpgrade containerd-stressUpgrade cni-pluginsUpgrade ecs-initUpgrade golang-docsUpgrade cri-tools-debuginfoUpgrade golangUpgrade golang-miscUpgrade cri-tools | Aug 9, 2023 | Jul 11, 2023 |
| Amazon_linux | — | Upgrade golangUpgrade containerd | Oct 7, 2023 | Jul 11, 2023 |
| Amazon_linux_2023 | — | Upgrade oci-add-hooks-debugsourceUpgrade golang-srcUpgrade docker-debuginfoUpgrade amazon-ssm-agent-debugsourceUpgrade containerd-stress-debuginfoUpgrade runc-debuginfoUpgrade runc-debugsourceUpgrade containerd-debugsourceUpgrade golangUpgrade oci-add-hooksUpgrade golang-miscUpgrade dockerUpgrade docker-debugsourceUpgrade cni-plugins-debuginfoUpgrade cni-pluginsUpgrade runcUpgrade containerd-debuginfoUpgrade containerd-stressUpgrade containerdUpgrade ecs-initUpgrade golang-docsUpgrade oci-add-hooks-debuginfoUpgrade golang-binUpgrade amazon-ssm-agent-debuginfoUpgrade golang-sharedUpgrade golang-testsUpgrade nerdctlUpgrade cni-plugins-debugsourceUpgrade amazon-ecr-credential-helperUpgrade amazon-ssm-agent | Feb 17, 2025 | Jul 11, 2023 |
| Centos_linux | — | Upgrade rubygem-jwtUpgrade buildah-testsUpgrade rubygem-loggingUpgrade rubygem-http-acceptUpgrade rubygem-gssapiUpgrade golang-miscUpgrade crunUpgrade podman-testsUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-oauthUpgrade slirp4netnsUpgrade libslirp-develUpgrade rubygem-unicode-debuginfoUpgrade delveUpgrade rubygem-rest-clientUpgrade rubygem-unf_extUpgrade podman-debugsourceUpgrade podman-gvproxyUpgrade rubygem-unicode-debugsourceUpgrade criu-libsUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade delve-debuginfoUpgrade runc-debuginfoUpgrade conmonUpgrade libslirpUpgrade rubygem-apipie-bindingsUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade criu-debuginfoUpgrade crun-debuginfoUpgrade container-selinuxUpgrade containernetworking-plugins-debugsourceUpgrade rubygem-fast_gettextUpgrade buildah-tests-debuginfoUpgrade rubygem-ffi-debuginfoUpgrade golang-raceUpgrade golang-srcUpgrade rubygem-version_gemUpgrade skopeo-debuginfoUpgrade go-toolsetUpgrade rubygem-amazing_printUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-localeUpgrade skopeo-testsUpgrade rubygem-hammer_cli_katelloUpgrade slirp4netns-debugsourceUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade podman-dockerUpgrade satellite-cloneUpgrade rubygem-clampUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade rubygem-ffi-debugsourceUpgrade conmon-debuginfoUpgrade rubygem-hammer_cliUpgrade buildah-debuginfoUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-snaky_hashUpgrade rubygem-http-cookieUpgrade containernetworking-plugins-debuginfoUpgrade rubygem-hammer_cli_foreman_tasksUpgrade python3-podmanUpgrade conmon-debugsourceUpgrade python39-pulp_manifestUpgrade buildahUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade golangUpgrade rubygem-unicodeUpgrade criu-develUpgrade cockpit-podmanUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-oauth-ttyUpgrade rubygem-mime-typesUpgrade rubygem-hashieUpgrade libslirp-debugsourceUpgrade critUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-multi_jsonUpgrade golang-binUpgrade rubygem-mime-types-dataUpgrade aardvark-dnsUpgrade fuse-overlayfs-debugsourceUpgrade toolbox-debugsourceUpgrade toolbox-debuginfoUpgrade toolboxUpgrade runc-debugsourceUpgrade rubygem-unicode-display_widthUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_templatesUpgrade podman-debuginfoUpgrade crun-debugsourceUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_openscapUpgrade podman-remote-debuginfoUpgrade podman-remoteUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-testsUpgrade satellite-cliUpgrade rubygem-powerbarUpgrade satellite-maintainUpgrade rubygem-little-pluggerUpgrade fuse-overlayfs-debuginfoUpgrade containers-commonUpgrade skopeoUpgrade rubygem-hammer_cli_foremanUpgrade podman-gvproxy-debuginfoUpgrade delve-debugsourceUpgrade criu-libs-debuginfoUpgrade criu-debugsourceUpgrade criuUpgrade udicaUpgrade rubygem-foreman_maintainUpgrade podman-catatonit-debuginfoUpgrade podman-plugins-debuginfoUpgrade buildah-debugsourceUpgrade fuse-overlayfsUpgrade skopeo-debugsourceUpgrade podman-pluginsUpgrade podmanUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade runcUpgrade rubygem-ffiUpgrade toolbox-testsUpgrade rubygem-unf_ext-debugsourceUpgrade libslirp-debuginfoUpgrade python3-criuUpgrade containernetworking-pluginsUpgrade slirp4netns-debuginfoUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade golang-docs | Nov 1, 2023 | Jul 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | Jul 11, 2023 |
| Freebsd | — | Upgrade go120Upgrade go119 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Jul 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jan 10, 2024 | Jul 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jan 10, 2024 | Jul 11, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Feb 12, 2024 | Jul 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jan 10, 2024 | Jul 11, 2023 |
| Oracle_linux | — | Upgrade podman-remoteUpgrade buildahUpgrade cockpit-podmanUpgrade udicaUpgrade critUpgrade oci-seccomp-bpf-hookUpgrade podman-dockerUpgrade buildah-testsUpgrade podman-gvproxyUpgrade aardvark-dnsUpgrade container-selinuxUpgrade python3-criuUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade criu-libsUpgrade runcUpgrade netavarkUpgrade libslirpUpgrade podman-pluginsUpgrade podman-catatonitUpgrade conmonUpgrade fuse-overlayfsUpgrade podmanUpgrade skopeoUpgrade crunUpgrade criuUpgrade podman-testsUpgrade libslirp-develUpgrade skopeo-testsUpgrade criu-develUpgrade slirp4netnsUpgrade python3-podman | Nov 16, 2023 | Jul 11, 2023 |
| Redhat Openshift | — | Upgrade openshiftUpgrade openshift-clients | Nov 16, 2023 | Jul 11, 2023 |
| Redhat_linux | — | Upgrade podman-debugsourceUpgrade slirp4netnsUpgrade conmonUpgrade udicaUpgrade criuUpgrade criu-libs-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade libslirp-debugsourceUpgrade toolboxUpgrade toolbox-debuginfoUpgrade buildah-debugsourceUpgrade slirp4netns-debuginfoUpgrade golang-docsUpgrade toolbox-debugsourceUpgrade podman-dockerUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-raceUpgrade python3-podmanUpgrade libslirpUpgrade fuse-overlayfs-debuginfoUpgrade cockpit-podmanUpgrade containernetworking-plugins-debugsourceUpgrade delveUpgrade podman-testsUpgrade netavarkUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade crunUpgrade skopeoUpgrade criu-develUpgrade delve-debugsourceUpgrade crun-debuginfoUpgrade toolbox-testsUpgrade skopeo-debuginfoNo solution existsUpgrade podman-catatonit-debuginfoUpgrade podman-pluginsUpgrade skopeo-testsUpgrade slirp4netns-debugsourceUpgrade delve-debuginfoUpgrade podman-debuginfoUpgrade golang-testsUpgrade golang-binUpgrade buildahUpgrade conmon-debugsourceUpgrade podman-remote-debuginfoUpgrade golang-miscUpgrade conmon-debuginfoUpgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-srcUpgrade podman-remoteUpgrade podman-gvproxy-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfs-debugsourceUpgrade skopeo-debugsourceUpgrade criu-libsUpgrade containers-commonUpgrade libslirp-develUpgrade buildah-testsUpgrade criu-debugsourceUpgrade runc-debuginfoUpgrade crun-debugsourceUpgrade criu-debuginfoUpgrade critUpgrade buildah-tests-debuginfoUpgrade buildah-debuginfoUpgrade python3-criuUpgrade golangUpgrade aardvark-dnsUpgrade go-toolsetUpgrade runcUpgrade container-selinuxUpgrade podmanUpgrade libslirp-debuginfoUpgrade runc-debugsourceUpgrade podman-plugins-debuginfo | Nov 1, 2023 | Jul 11, 2023 |
| Rocky_linux | — | Upgrade criu-debugsourceUpgrade python3-criuUpgrade podman-debuginfoUpgrade buildah-testsUpgrade libslirp-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade libdb-debugsourceUpgrade libslirp-debuginfoUpgrade podman-debugsourceUpgrade skopeoUpgrade aardvark-dnsUpgrade criu-libs-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade slirp4netns-debugsourceUpgrade critUpgrade libdb-sql-devel-debuginfoUpgrade buildah-debuginfoUpgrade buildahUpgrade containers-commonUpgrade criuUpgrade containernetworking-plugins-debuginfoUpgrade crun-debugsourceUpgrade podmanUpgrade podman-plugins-debuginfoUpgrade podman-remoteUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runcUpgrade toolbox-debugsourceUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-pluginsUpgrade runc-debugsourceUpgrade podman-remote-debuginfoUpgrade slirp4netns-debuginfoUpgrade toolbox-debuginfoUpgrade skopeo-debuginfoUpgrade buildah-tests-debuginfoUpgrade crunUpgrade podman-gvproxyUpgrade criu-develUpgrade conmonUpgrade skopeo-testsUpgrade runc-debuginfoUpgrade criu-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade crun-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podman-pluginsUpgrade netavarkUpgrade skopeo-debugsourceUpgrade libdb-cxx-debuginfoUpgrade libdb-cxxUpgrade fuse-overlayfsUpgrade podman-testsUpgrade libslirpUpgrade conmon-debugsourceUpgrade libslirp-develUpgrade toolbox-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netnsUpgrade libdb-debuginfoUpgrade conmon-debuginfoUpgrade buildah-debugsourceUpgrade podman-catatonit-debuginfoUpgrade libdb-utils-debuginfoUpgrade criu-libsUpgrade libdb-sql-debuginfoUpgrade toolbox | Mar 5, 2024 | Jul 11, 2023 |
| Suse | — | Upgrade go1.19-raceUpgrade go1.20-raceUpgrade go1.20-openssl-raceUpgrade go1.20-openssl-docUpgrade go1.19-openssl-raceUpgrade go1.20-opensslUpgrade go1.19-openssl-docUpgrade go1.19-docUpgrade go1.20Upgrade go1.19-opensslUpgrade go1.19Upgrade go1.20-doc | Jul 18, 2023 | Jul 11, 2023 |
| Ubuntu | — | Upgrade golang-1.18Upgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.17Upgrade golang-1.18-srcUpgrade golang-1.17-srcUpgrade golang-1.17-go | Oct 11, 2024 | Jul 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub