The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade criuUpgrade crunUpgrade critUpgrade conmonUpgrade cockpit-podmanUpgrade python3-podmanUpgrade buildah-testsUpgrade toolbox-testsUpgrade podman-catatonitUpgrade podman-dockerUpgrade podman-gvproxyUpgrade python3-criuUpgrade buildahUpgrade runcUpgrade fuse-overlayfsUpgrade slirp4netnsUpgrade aardvark-dnsUpgrade libslirpUpgrade podman-testsUpgrade udicaUpgrade criu-libsUpgrade criu-develUpgrade podman-remoteUpgrade podman-pluginsUpgrade containers-commonUpgrade podmanUpgrade containernetworking-pluginsUpgrade libslirp-develUpgrade netavarkUpgrade container-selinuxUpgrade oci-seccomp-bpf-hookUpgrade toolboxUpgrade skopeoUpgrade skopeo-tests | Nov 16, 2023 | Jul 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Jul 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golistUpgrade golang-testsUpgrade golang-srcUpgrade amazon-ssm-agentUpgrade golang-sharedUpgrade containerdUpgrade runc-debuginfoUpgrade containerd-debuginfoUpgrade runcUpgrade golang-binUpgrade nerdctl-debuginfoUpgrade amazon-ssm-agent-debuginfoUpgrade golist-debuginfoUpgrade cni-plugins-debuginfoUpgrade golang-docsUpgrade cri-toolsUpgrade cni-pluginsUpgrade ecs-initUpgrade cri-tools-debuginfoUpgrade nerdctlUpgrade golangUpgrade golang-miscUpgrade containerd-stress | Aug 9, 2023 | Jul 11, 2023 |
| Amazon_linux | — | Upgrade containerdUpgrade golang | Oct 7, 2023 | Jul 11, 2023 |
| Amazon_linux_2023 | — | Upgrade containerd-stress-debuginfoUpgrade containerd-debugsourceUpgrade runc-debuginfoUpgrade oci-add-hooks-debugsourceUpgrade dockerUpgrade docker-debugsourceUpgrade golang-miscUpgrade runc-debugsourceUpgrade golang-srcUpgrade amazon-ssm-agent-debugsourceUpgrade golangUpgrade cni-plugins-debuginfoUpgrade oci-add-hooksUpgrade cni-pluginsUpgrade docker-debuginfoUpgrade amazon-ssm-agentUpgrade golang-sharedUpgrade golang-docsUpgrade golang-testsUpgrade cni-plugins-debugsourceUpgrade nerdctlUpgrade runcUpgrade containerd-debuginfoUpgrade ecs-initUpgrade golang-binUpgrade amazon-ssm-agent-debuginfoUpgrade containerd-stressUpgrade containerdUpgrade amazon-ecr-credential-helperUpgrade oci-add-hooks-debuginfo | Feb 17, 2025 | Jul 11, 2023 |
| Centos_linux | — | Upgrade podmanUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade runcUpgrade slirp4netns-debuginfoUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolbox-testsUpgrade containernetworking-pluginsUpgrade toolbox-debuginfoUpgrade rubygem-hammer_cli_foreman_templatesUpgrade toolboxUpgrade runc-debugsourceUpgrade aardvark-dnsUpgrade fuse-overlayfs-debugsourceUpgrade toolbox-debugsourceUpgrade libslirp-debuginfoUpgrade rubygem-hashieUpgrade rubygem-oauth-ttyUpgrade libslirp-debugsourceUpgrade rubygem-unf_ext-debuginfoUpgrade skopeo-debugsourceUpgrade rubygem-ffiUpgrade python3-criuUpgrade rubygem-mime-typesUpgrade rubygem-unicode-display_widthUpgrade rubygem-mime-types-dataUpgrade criuUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_adminUpgrade satellite-cliUpgrade udicaUpgrade podman-pluginsUpgrade rubygem-unfUpgrade rubygem-unf_ext-debugsourceUpgrade buildah-debugsourceUpgrade rubygem-little-pluggerUpgrade rubygem-multi_jsonUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-catatonitUpgrade podman-gvproxy-debuginfoUpgrade podman-plugins-debuginfoUpgrade delve-debugsourceUpgrade rubygem-hammer_cli_foremanUpgrade containers-commonUpgrade fuse-overlayfs-debuginfoUpgrade golang-binUpgrade golang-docsUpgrade rubygem-powerbarUpgrade satellite-maintainUpgrade skopeoUpgrade golang-testsUpgrade podman-remoteUpgrade podman-remote-debuginfoUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-netrcUpgrade critUpgrade fuse-overlayfsUpgrade criu-debugsourceUpgrade criu-libs-debuginfoUpgrade crun-debugsourceUpgrade podman-debuginfoUpgrade buildah-testsUpgrade conmon-debuginfoUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade podman-debugsourceUpgrade rubygem-oauthUpgrade golangUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade buildah-tests-debuginfoUpgrade cockpit-podmanUpgrade podman-gvproxyUpgrade skopeo-debuginfoUpgrade conmon-debugsourceUpgrade rubygem-clampUpgrade buildahUpgrade python39-pulp_manifestUpgrade rubygem-domain_nameUpgrade podman-dockerUpgrade oci-seccomp-bpf-hookUpgrade netavarkUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-unicode-debuginfoUpgrade criu-libsUpgrade rubygem-unicode-debugsourceUpgrade rubygem-rest-clientUpgrade rubygem-apipie-bindingsUpgrade rubygem-unf_extUpgrade rubygem-highlineUpgrade delve-debuginfoUpgrade rubygem-snaky_hashUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cliUpgrade python3-podmanUpgrade buildah-debuginfoUpgrade rubygem-jwtUpgrade containernetworking-plugins-debugsourceUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-unicodeUpgrade rubygem-version_gemUpgrade rubygem-ffi-debuginfoUpgrade rubygem-loggingUpgrade podman-testsUpgrade rubygem-gssapiUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade golang-miscUpgrade criu-develUpgrade container-selinuxUpgrade crunUpgrade delveUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-ffi-debugsourceUpgrade rubygem-amazing_printUpgrade libslirp-develUpgrade golang-raceUpgrade go-toolsetUpgrade foreman-cliUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netnsUpgrade skopeo-testsUpgrade rubygem-localeUpgrade rubygem-fast_gettextUpgrade golang-srcUpgrade slirp4netns-debugsourceUpgrade runc-debuginfoUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade libslirpUpgrade conmonUpgrade crun-debuginfoUpgrade criu-debuginfo | Nov 1, 2023 | Jul 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | Jul 11, 2023 |
| Freebsd | — | Upgrade go119Upgrade go120 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Jul 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jan 10, 2024 | Jul 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Jan 10, 2024 | Jul 11, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Feb 12, 2024 | Jul 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jan 10, 2024 | Jul 11, 2023 |
| Oracle_linux | — | Upgrade udicaUpgrade cockpit-podmanUpgrade podman-remoteUpgrade container-selinuxUpgrade podman-gvproxyUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hookUpgrade buildah-testsUpgrade containernetworking-pluginsUpgrade buildahUpgrade critUpgrade podman-dockerUpgrade containers-commonUpgrade criu-libsUpgrade runcUpgrade python3-criuUpgrade podman-pluginsUpgrade netavarkUpgrade crunUpgrade skopeoUpgrade slirp4netnsUpgrade fuse-overlayfsUpgrade python3-podmanUpgrade podman-catatonitUpgrade conmonUpgrade criuUpgrade criu-develUpgrade libslirpUpgrade podmanUpgrade libslirp-develUpgrade podman-testsUpgrade skopeo-tests | Nov 16, 2023 | Jul 11, 2023 |
| Redhat Openshift | — | Upgrade openshiftUpgrade openshift-clients | Nov 16, 2023 | Jul 11, 2023 |
| Redhat_linux | — | Upgrade cockpit-podmanUpgrade containernetworking-plugins-debugsourceUpgrade podman-testsUpgrade netavarkUpgrade fuse-overlayfs-debuginfoUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade delveUpgrade slirp4netnsUpgrade python3-podmanUpgrade libslirpUpgrade golang-raceUpgrade toolbox-testsUpgrade criu-develUpgrade buildah-debugsourceUpgrade conmonUpgrade crun-debuginfoUpgrade skopeo-testsUpgrade skopeo-debuginfoUpgrade udicaUpgrade golang-docsUpgrade toolbox-debugsourceUpgrade toolboxUpgrade containernetworking-plugins-debuginfoUpgrade podman-gvproxyUpgrade criu-libs-debuginfoUpgrade libslirp-debugsourceUpgrade podman-pluginsUpgrade podman-debugsourceUpgrade podman-dockerNo solution existsUpgrade slirp4netns-debuginfoUpgrade crunUpgrade slirp4netns-debugsourceUpgrade podman-catatonitUpgrade delve-debugsourceUpgrade toolbox-debuginfoUpgrade criuUpgrade skopeoUpgrade buildah-debuginfoUpgrade podmanUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade aardvark-dnsUpgrade golang-binUpgrade conmon-debuginfoUpgrade podman-debuginfoUpgrade golang-miscUpgrade buildahUpgrade golang-testsUpgrade criu-debuginfoUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfs-debugsourceUpgrade libslirp-debuginfoUpgrade go-toolsetUpgrade criu-debugsourceUpgrade runc-debuginfoUpgrade buildah-tests-debuginfoUpgrade criu-libsUpgrade container-selinuxUpgrade podman-gvproxy-debuginfoUpgrade podman-remoteUpgrade containers-commonUpgrade runc-debugsourceUpgrade runcUpgrade podman-remote-debuginfoUpgrade conmon-debugsourceUpgrade delve-debuginfoUpgrade skopeo-debugsourceUpgrade containernetworking-pluginsUpgrade crun-debugsourceUpgrade buildah-testsUpgrade golang-srcUpgrade python3-criuUpgrade podman-plugins-debuginfoUpgrade golangUpgrade fuse-overlayfsUpgrade crit | Nov 1, 2023 | Jul 11, 2023 |
| Rocky_linux | — | Upgrade libslirp-debugsourceUpgrade buildah-testsUpgrade podmanUpgrade podman-debuginfoUpgrade podman-plugins-debuginfoUpgrade toolbox-debugsourceUpgrade buildahUpgrade libdb-sql-devel-debuginfoUpgrade toolbox-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runcUpgrade containers-commonUpgrade criuUpgrade podman-remoteUpgrade aardvark-dnsUpgrade buildah-debuginfoUpgrade criu-debugsourceUpgrade libdb-debugsourceUpgrade python3-criuUpgrade podman-remote-debuginfoUpgrade runc-debugsourceUpgrade libslirp-debuginfoUpgrade slirp4netns-debuginfoUpgrade skopeoUpgrade containernetworking-pluginsUpgrade critUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade criu-libs-debuginfoUpgrade podman-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade podman-catatonitUpgrade crun-debugsourceUpgrade criu-develUpgrade libdb-cxx-debuginfoUpgrade libdb-debuginfoUpgrade skopeo-debuginfoUpgrade podman-gvproxyUpgrade crunUpgrade skopeo-debugsourceUpgrade fuse-overlayfsUpgrade conmon-debugsourceUpgrade libdb-cxxUpgrade buildah-tests-debuginfoUpgrade criu-debuginfoUpgrade criu-libsUpgrade libdb-sql-debuginfoUpgrade toolboxUpgrade libslirp-develUpgrade podman-catatonit-debuginfoUpgrade libdb-utils-debuginfoUpgrade buildah-debugsourceUpgrade toolbox-testsUpgrade slirp4netnsUpgrade skopeo-testsUpgrade runc-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade conmon-debuginfoUpgrade podman-testsUpgrade podman-pluginsUpgrade netavarkUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade conmonUpgrade libslirpUpgrade fuse-overlayfs-debuginfoUpgrade crun-debuginfo | Mar 5, 2024 | Jul 11, 2023 |
| Suse | — | Upgrade go1.19-docUpgrade go1.20Upgrade go1.19-opensslUpgrade go1.19-openssl-docUpgrade go1.19Upgrade go1.20-docUpgrade go1.20-opensslUpgrade go1.20-openssl-raceUpgrade go1.20-openssl-docUpgrade go1.19-raceUpgrade go1.20-raceUpgrade go1.19-openssl-race | Jul 18, 2023 | Jul 11, 2023 |
| Ubuntu | — | Upgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.17Upgrade golang-1.18-srcUpgrade golang-1.17-goUpgrade golang-1.18-goUpgrade golang-1.17-srcUpgrade golang-1.18 (Ubuntu Pro) | Oct 11, 2024 | Jul 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub