The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade buildah-testsUpgrade toolbox-testsUpgrade podman-dockerUpgrade podman-testsUpgrade cockpit-podmanUpgrade podman-catatonitUpgrade slirp4netnsUpgrade aardvark-dnsUpgrade libslirpUpgrade python3-criuUpgrade conmonUpgrade criuUpgrade runcUpgrade fuse-overlayfsUpgrade podman-gvproxyUpgrade python3-podmanUpgrade buildahUpgrade crunUpgrade critUpgrade udicaUpgrade libslirp-develUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hookUpgrade skopeoUpgrade criu-develUpgrade toolboxUpgrade podmanUpgrade netavarkUpgrade podman-remoteUpgrade podman-pluginsUpgrade container-selinux | Nov 16, 2023 | Jul 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Jul 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade cni-pluginsUpgrade nerdctlUpgrade cri-tools-debuginfoUpgrade golang-docsUpgrade golang-miscUpgrade ecs-initUpgrade golangUpgrade containerd-stressUpgrade cri-toolsUpgrade containerd-debuginfoUpgrade runc-debuginfoUpgrade golang-sharedUpgrade golistUpgrade amazon-ssm-agentUpgrade cni-plugins-debuginfoUpgrade golang-binUpgrade golang-testsUpgrade nerdctl-debuginfoUpgrade golist-debuginfoUpgrade runcUpgrade containerdUpgrade amazon-ssm-agent-debuginfoUpgrade golang-src | Aug 9, 2023 | Jul 11, 2023 |
| Amazon_linux | — | Upgrade golangUpgrade containerd | Oct 7, 2023 | Jul 11, 2023 |
| Amazon_linux_2023 | — | Upgrade amazon-ssm-agent-debuginfoUpgrade runcUpgrade amazon-ecr-credential-helperUpgrade containerd-debuginfoUpgrade golang-testsUpgrade cni-plugins-debugsourceUpgrade amazon-ssm-agentUpgrade golang-docsUpgrade oci-add-hooks-debuginfoUpgrade ecs-initUpgrade nerdctlUpgrade golang-sharedUpgrade golang-binUpgrade containerd-stressUpgrade containerdUpgrade docker-debuginfoUpgrade dockerUpgrade oci-add-hooks-debugsourceUpgrade docker-debugsourceUpgrade runc-debugsourceUpgrade golang-miscUpgrade containerd-debugsourceUpgrade cni-plugins-debuginfoUpgrade amazon-ssm-agent-debugsourceUpgrade golangUpgrade cni-pluginsUpgrade oci-add-hooksUpgrade runc-debuginfoUpgrade containerd-stress-debuginfoUpgrade golang-src | Feb 17, 2025 | Jul 11, 2023 |
| Centos_linux | — | Upgrade crun-debugsourceUpgrade rubygem-hammer_cli_foreman_openscapUpgrade aardvark-dnsUpgrade rubygem-hammer_cli_foreman_adminUpgrade podman-gvproxy-debuginfoUpgrade podman-plugins-debuginfoUpgrade rubygem-hammer_cli_foremanUpgrade libslirp-debugsourceUpgrade criu-debugsourceUpgrade criu-libs-debuginfoUpgrade critUpgrade delve-debugsourceUpgrade slirp4netns-debuginfoUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade fuse-overlayfsUpgrade rubygem-mime-types-dataUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade skopeoUpgrade libslirp-debuginfoUpgrade podman-debuginfoUpgrade podmanUpgrade golang-docsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade rubygem-hashieUpgrade python3-criuUpgrade fuse-overlayfs-debugsourceUpgrade rubygem-foreman_maintainUpgrade satellite-cliUpgrade skopeo-debugsourceUpgrade criuUpgrade golang-binUpgrade containers-commonUpgrade buildah-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade golang-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade rubygem-little-pluggerUpgrade rubygem-multi_jsonUpgrade toolbox-debuginfoUpgrade toolbox-debugsourceUpgrade toolboxUpgrade rubygem-unfUpgrade podman-remote-debuginfoUpgrade rubygem-netrcUpgrade rubygem-oauth-ttyUpgrade rubygem-unicode-display_widthUpgrade podman-catatonitUpgrade podman-remoteUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-powerbarUpgrade satellite-maintainUpgrade podman-catatonit-debuginfoUpgrade toolbox-testsUpgrade rubygem-ffiUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-mime-typesUpgrade udicaUpgrade runc-debugsourceUpgrade rubygem-unf_ext-debugsourceUpgrade runcUpgrade rubygem-hammer_cli_foreman_tasksUpgrade criu-debuginfoUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade golang-srcUpgrade containernetworking-plugins-debugsourceUpgrade cockpit-podmanUpgrade rubygem-snaky_hashUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade conmon-debuginfoUpgrade buildah-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade rubygem-ffi-debugsourceUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unicode-debuginfoUpgrade rubygem-unf_extUpgrade rubygem-rest-clientUpgrade rubygem-highlineUpgrade rubygem-apipie-bindingsUpgrade delve-debuginfoUpgrade criu-libsUpgrade skopeo-testsUpgrade slirp4netnsUpgrade rubygem-localeUpgrade rubygem-hammer_cli_katelloUpgrade libslirp-develUpgrade golang-raceUpgrade go-toolsetUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-amazing_printUpgrade rubygem-fast_gettextUpgrade python3-podmanUpgrade buildah-tests-debuginfoUpgrade buildah-testsUpgrade crun-debuginfoUpgrade podman-testsUpgrade rubygem-gssapiUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade golang-miscUpgrade delveUpgrade crunUpgrade criu-develUpgrade container-selinuxUpgrade podman-debugsourceUpgrade podman-gvproxyUpgrade rubygem-loggingUpgrade rubygem-jwtUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade oci-seccomp-bpf-hookUpgrade rubygem-hammer_cliUpgrade python39-pulp_manifestUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-domain_nameUpgrade netavarkUpgrade conmon-debugsourceUpgrade rubygem-clampUpgrade podman-dockerUpgrade buildahUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade libslirpUpgrade conmonUpgrade runc-debuginfoUpgrade rubygem-unicodeUpgrade golangUpgrade skopeo-debuginfoUpgrade rubygem-ffi-debuginfoUpgrade slirp4netns-debugsourceUpgrade rubygem-version_gem | Nov 1, 2023 | Jul 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | Jul 11, 2023 |
| Freebsd | — | Upgrade go119Upgrade go120 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Jul 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jan 10, 2024 | Jul 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jan 10, 2024 | Jul 11, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golang-binUpgrade golang | Feb 12, 2024 | Jul 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jan 10, 2024 | Jul 11, 2023 |
| Oracle_linux | — | Upgrade slirp4netnsUpgrade skopeoUpgrade netavarkUpgrade podman-pluginsUpgrade libslirpUpgrade python3-podmanUpgrade podman-testsUpgrade skopeo-testsUpgrade libslirp-develUpgrade podmanUpgrade criu-develUpgrade conmonUpgrade crunUpgrade criuUpgrade fuse-overlayfsUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade containernetworking-pluginsUpgrade cockpit-podmanUpgrade containers-commonUpgrade runcUpgrade python3-criuUpgrade critUpgrade aardvark-dnsUpgrade buildah-testsUpgrade container-selinuxUpgrade udicaUpgrade podman-dockerUpgrade oci-seccomp-bpf-hookUpgrade buildahUpgrade podman-remoteUpgrade criu-libs | Nov 16, 2023 | Jul 11, 2023 |
| Redhat Openshift | — | Upgrade openshift-clientsUpgrade openshift | Nov 16, 2023 | Jul 11, 2023 |
| Redhat_linux | — | Upgrade toolbox-debugsourceUpgrade criuUpgrade toolboxUpgrade criu-libs-debuginfoUpgrade toolbox-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade udicaUpgrade skopeo-testsUpgrade delveUpgrade slirp4netnsUpgrade cockpit-podmanUpgrade podman-gvproxyUpgrade skopeo-debuginfoUpgrade golang-raceUpgrade crunUpgrade conmonUpgrade podman-pluginsUpgrade slirp4netns-debugsourceUpgrade buildah-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonitUpgrade slirp4netns-debuginfoUpgrade delve-debugsourceUpgrade python3-podmanUpgrade crun-debuginfoUpgrade podman-dockerNo solution existsUpgrade fuse-overlayfs-debuginfoUpgrade skopeoUpgrade golang-docsUpgrade podman-debugsourceUpgrade criu-develUpgrade podman-testsUpgrade netavarkUpgrade podman-catatonit-debuginfoUpgrade libslirpUpgrade toolbox-debuginfoUpgrade libslirp-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade buildah-debuginfoUpgrade golangUpgrade crun-debugsourceUpgrade critUpgrade delve-debuginfoUpgrade runcUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade runc-debuginfoUpgrade criu-debugsourceUpgrade buildahUpgrade conmon-debugsourceUpgrade podman-remote-debuginfoUpgrade golang-miscUpgrade podman-debuginfoUpgrade golang-testsUpgrade conmon-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade containers-commonUpgrade podman-gvproxy-debuginfoUpgrade libslirp-develUpgrade podman-plugins-debuginfoUpgrade criu-debuginfoUpgrade golang-binUpgrade buildah-tests-debuginfoUpgrade skopeo-debugsourceUpgrade buildah-testsUpgrade python3-criuUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade fuse-overlayfsUpgrade podman-remoteUpgrade libslirp-debuginfoUpgrade aardvark-dnsUpgrade runc-debugsourceUpgrade podmanUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade golang-srcUpgrade go-toolset | Nov 1, 2023 | Jul 11, 2023 |
| Rocky_linux | — | Upgrade podman-catatonitUpgrade crun-debugsourceUpgrade runc-debugsourceUpgrade podmanUpgrade slirp4netns-debuginfoUpgrade containernetworking-pluginsUpgrade podman-remote-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade podman-debugsourceUpgrade critUpgrade slirp4netns-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade criu-libs-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade libslirp-debuginfoUpgrade podman-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade buildah-testsUpgrade libdb-debugsourceUpgrade python3-criuUpgrade skopeoUpgrade libslirp-debugsourceUpgrade aardvark-dnsUpgrade buildahUpgrade criu-debugsourceUpgrade buildah-debuginfoUpgrade criuUpgrade podman-plugins-debuginfoUpgrade podman-remoteUpgrade runcUpgrade toolbox-debuginfoUpgrade toolbox-debugsourceUpgrade containers-commonUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-catatonit-debuginfoUpgrade toolbox-testsUpgrade buildah-debugsourceUpgrade libdb-utils-debuginfoUpgrade netavarkUpgrade slirp4netnsUpgrade libslirpUpgrade podman-testsUpgrade podman-pluginsUpgrade criu-debuginfoUpgrade conmon-debugsourceUpgrade buildah-tests-debuginfoUpgrade podman-gvproxyUpgrade crunUpgrade criu-libsUpgrade criu-develUpgrade runc-debuginfoUpgrade crun-debuginfoUpgrade conmon-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade skopeo-testsUpgrade skopeo-debuginfoUpgrade conmonUpgrade libdb-cxxUpgrade fuse-overlayfsUpgrade skopeo-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libslirp-develUpgrade libdb-sql-debuginfoUpgrade toolboxUpgrade fuse-overlayfs-debuginfoUpgrade libdb-debuginfo | Mar 5, 2024 | Jul 11, 2023 |
| Suse | — | Upgrade go1.20-opensslUpgrade go1.19-opensslUpgrade go1.19Upgrade go1.19-openssl-docUpgrade go1.20Upgrade go1.19-docUpgrade go1.20-docUpgrade go1.20-raceUpgrade go1.19-openssl-raceUpgrade go1.20-openssl-docUpgrade go1.20-openssl-raceUpgrade go1.19-race | Jul 18, 2023 | Jul 11, 2023 |
| Ubuntu | — | Upgrade golang-1.18-srcUpgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.17-srcUpgrade golang-1.17Upgrade golang-1.17-goUpgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.18 | Oct 11, 2024 | Jul 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub