The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podmanUpgrade skopeo-testsUpgrade toolboxUpgrade containernetworking-pluginsUpgrade podman-pluginsUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade netavarkUpgrade criu-develUpgrade containers-commonUpgrade skopeoUpgrade podman-remoteUpgrade libslirp-develUpgrade container-selinuxUpgrade python3-podmanUpgrade criuUpgrade cockpit-podmanUpgrade udicaUpgrade podman-testsUpgrade conmonUpgrade aardvark-dnsUpgrade python3-criuUpgrade fuse-overlayfsUpgrade buildahUpgrade slirp4netnsUpgrade libslirpUpgrade podman-dockerUpgrade critUpgrade podman-catatonitUpgrade buildah-testsUpgrade toolbox-testsUpgrade runcUpgrade podman-gvproxyUpgrade crun | Nov 16, 2023 | Jul 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Jul 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade nerdctlUpgrade cri-toolsUpgrade golang-docsUpgrade cni-pluginsUpgrade golang-miscUpgrade ecs-initUpgrade cri-tools-debuginfoUpgrade golangUpgrade containerd-stressUpgrade cni-plugins-debuginfoUpgrade amazon-ssm-agentUpgrade golang-testsUpgrade runcUpgrade golang-binUpgrade containerd-debuginfoUpgrade containerdUpgrade golang-sharedUpgrade golang-srcUpgrade runc-debuginfoUpgrade nerdctl-debuginfoUpgrade golistUpgrade golist-debuginfoUpgrade amazon-ssm-agent-debuginfo | Aug 9, 2023 | Jul 11, 2023 |
| Amazon_linux | — | Upgrade golangUpgrade containerd | Oct 7, 2023 | Jul 11, 2023 |
| Amazon_linux_2023 | — | Upgrade runcUpgrade amazon-ssm-agentUpgrade oci-add-hooks-debuginfoUpgrade golang-binUpgrade golang-sharedUpgrade containerd-debuginfoUpgrade nerdctlUpgrade golang-docsUpgrade ecs-initUpgrade amazon-ecr-credential-helperUpgrade amazon-ssm-agent-debuginfoUpgrade golang-testsUpgrade cni-plugins-debugsourceUpgrade containerdUpgrade containerd-stressUpgrade amazon-ssm-agent-debugsourceUpgrade runc-debuginfoUpgrade cni-pluginsUpgrade oci-add-hooksUpgrade cni-plugins-debuginfoUpgrade docker-debuginfoUpgrade golang-miscUpgrade runc-debugsourceUpgrade golang-srcUpgrade containerd-debugsourceUpgrade docker-debugsourceUpgrade oci-add-hooks-debugsourceUpgrade dockerUpgrade golangUpgrade containerd-stress-debuginfo | Feb 17, 2025 | Jul 11, 2023 |
| Centos_linux | — | Upgrade foreman-cliUpgrade go-toolsetUpgrade containernetworking-plugins-debuginfoUpgrade rubygem-amazing_printUpgrade delveUpgrade slirp4netnsUpgrade rubygem-ffi-debugsourceUpgrade rubygem-gssapiUpgrade rubygem-http-acceptUpgrade podman-testsUpgrade rubygem-loggingUpgrade golang-miscUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-unicode-debuginfoUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unf_extUpgrade container-selinuxUpgrade rubygem-highlineUpgrade rubygem-rest-clientUpgrade criu-develUpgrade crunUpgrade rubygem-hammer_cli_katelloUpgrade golang-raceUpgrade libslirp-develUpgrade rubygem-localeUpgrade golang-srcUpgrade buildah-tests-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade satellite-cloneUpgrade python39-pulp_manifestUpgrade rubygem-fast_gettextUpgrade rubygem-clampUpgrade conmon-debugsourceUpgrade podman-dockerUpgrade netavarkUpgrade rubygem-http-cookieUpgrade buildahUpgrade rubygem-domain_nameUpgrade cockpit-podmanUpgrade conmon-debuginfoUpgrade python3-podmanUpgrade buildah-debuginfoUpgrade rubygem-snaky_hashUpgrade podman-debugsourceUpgrade podman-gvproxyUpgrade rubygem-oauthUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unicodeUpgrade libslirpUpgrade criu-debuginfoUpgrade runc-debuginfoUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade conmonUpgrade golangUpgrade buildah-testsUpgrade rubygem-version_gemUpgrade crun-debuginfoUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade slirp4netns-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade skopeo-debuginfoUpgrade rubygem-ffi-debuginfoUpgrade criu-libsUpgrade delve-debuginfoUpgrade rubygem-apipie-bindingsUpgrade skopeo-testsUpgrade golang-testsUpgrade libslirp-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade podman-remoteUpgrade udicaUpgrade skopeo-debugsourceUpgrade satellite-cliUpgrade podman-catatonit-debuginfoUpgrade buildah-debugsourceUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-foreman_maintainUpgrade criuUpgrade crun-debugsourceUpgrade satellite-maintainUpgrade rubygem-powerbarUpgrade rubygem-multi_jsonUpgrade rubygem-little-pluggerUpgrade fuse-overlayfs-debuginfoUpgrade containers-commonUpgrade golang-binUpgrade skopeoUpgrade golang-docsUpgrade rubygem-hammer_cli_foremanUpgrade podman-plugins-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade fuse-overlayfsUpgrade delve-debugsourceUpgrade criu-libs-debuginfoUpgrade critUpgrade criu-debugsourceUpgrade rubygem-ffiUpgrade toolbox-debugsourceUpgrade toolbox-debuginfoUpgrade toolboxUpgrade runc-debugsourceUpgrade rubygem-unfUpgrade libslirp-debuginfoUpgrade containernetworking-pluginsUpgrade slirp4netns-debuginfoUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade podmanUpgrade runcUpgrade toolbox-testsUpgrade podman-debuginfoUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_openscapUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-pluginsUpgrade python3-criuUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade rubygem-unicode-display_widthUpgrade podman-remote-debuginfoUpgrade rubygem-hashieUpgrade rubygem-mime-types-dataUpgrade aardvark-dnsUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-oauth-ttyUpgrade rubygem-mime-types | Nov 1, 2023 | Jul 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | Jul 11, 2023 |
| Freebsd | — | Upgrade go120Upgrade go119 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Jul 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jan 10, 2024 | Jul 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jan 10, 2024 | Jul 11, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-binUpgrade golangUpgrade golang-src | Feb 12, 2024 | Jul 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Jan 10, 2024 | Jul 11, 2023 |
| Oracle_linux | — | Upgrade criuUpgrade crunUpgrade podman-pluginsUpgrade podmanUpgrade skopeo-testsUpgrade fuse-overlayfsUpgrade criu-develUpgrade podman-catatonitUpgrade libslirpUpgrade skopeoUpgrade netavarkUpgrade python3-podmanUpgrade libslirp-develUpgrade conmonUpgrade podman-testsUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hookUpgrade buildah-testsUpgrade aardvark-dnsUpgrade podman-gvproxyUpgrade python3-criuUpgrade podman-dockerUpgrade criu-libsUpgrade containers-commonUpgrade container-selinuxUpgrade udicaUpgrade runcUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade cockpit-podmanUpgrade buildahUpgrade crit | Nov 16, 2023 | Jul 11, 2023 |
| Redhat Openshift | — | Upgrade openshift-clientsUpgrade openshift | Nov 16, 2023 | Jul 11, 2023 |
| Redhat_linux | — | Upgrade golang-docsNo solution existsUpgrade slirp4netns-debuginfoUpgrade delve-debugsourceUpgrade skopeoUpgrade delveUpgrade crun-debuginfoUpgrade libslirp-debugsourceUpgrade criu-libs-debuginfoUpgrade toolbox-debugsourceUpgrade toolboxUpgrade podman-gvproxyUpgrade containernetworking-plugins-debuginfoUpgrade criuUpgrade toolbox-debuginfoUpgrade libslirpUpgrade cockpit-podmanUpgrade python3-podmanUpgrade golang-raceUpgrade podman-testsUpgrade fuse-overlayfs-debuginfoUpgrade netavarkUpgrade podman-catatonitUpgrade podman-pluginsUpgrade podman-catatonit-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-dockerUpgrade buildah-debugsourceUpgrade libslirp-debuginfoUpgrade critUpgrade aardvark-dnsUpgrade runc-debuginfoUpgrade containernetworking-pluginsUpgrade podman-plugins-debuginfoUpgrade golangUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade python3-criuUpgrade conmon-debugsourceUpgrade podman-debuginfoUpgrade golang-miscUpgrade delve-debuginfoUpgrade podman-remote-debuginfoUpgrade libslirp-develUpgrade go-toolsetUpgrade skopeo-debugsourceUpgrade buildah-testsUpgrade buildahUpgrade golang-testsUpgrade conmon-debuginfoUpgrade container-selinuxUpgrade criu-debugsourceUpgrade golang-srcUpgrade buildah-debuginfoUpgrade podmanUpgrade criu-libsUpgrade runcUpgrade containers-commonUpgrade podman-remoteUpgrade podman-gvproxy-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfs-debugsourceUpgrade golang-binUpgrade crun-debugsourceUpgrade criu-debuginfoUpgrade buildah-tests-debuginfoUpgrade runc-debugsourceUpgrade criu-develUpgrade podman-debugsourceUpgrade udicaUpgrade conmonUpgrade toolbox-testsUpgrade slirp4netns-debugsourceUpgrade skopeo-testsUpgrade crunUpgrade slirp4netnsUpgrade skopeo-debuginfo | Nov 1, 2023 | Jul 11, 2023 |
| Rocky_linux | — | Upgrade skopeo-testsUpgrade libdb-sql-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonit-debuginfoUpgrade crun-debuginfoUpgrade libdb-utils-debuginfoUpgrade buildah-debugsourceUpgrade libdb-debuginfoUpgrade slirp4netnsUpgrade podmanUpgrade podman-plugins-debuginfoUpgrade python3-criuUpgrade podman-remote-debuginfoUpgrade buildah-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade containers-commonUpgrade toolbox-debugsourceUpgrade toolbox-debuginfoUpgrade runcUpgrade podman-remoteUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criuUpgrade oci-seccomp-bpf-hookUpgrade podman-catatonitUpgrade podman-debuginfoUpgrade buildah-testsUpgrade libslirp-debugsourceUpgrade libslirp-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade slirp4netns-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade criu-libs-debuginfoUpgrade podman-debugsourceUpgrade critUpgrade runc-debugsourceUpgrade criu-debugsourceUpgrade buildahUpgrade aardvark-dnsUpgrade crun-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade libdb-debugsourceUpgrade skopeoUpgrade containernetworking-pluginsUpgrade slirp4netns-debuginfoUpgrade toolbox-testsUpgrade runc-debuginfoUpgrade libslirp-develUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade conmon-debuginfoUpgrade conmonUpgrade toolboxUpgrade fuse-overlayfs-debuginfoUpgrade netavarkUpgrade podman-pluginsUpgrade libslirp | Mar 5, 2024 | Jul 11, 2023 |
| Suse | — | Upgrade go1.20-raceUpgrade go1.19-openssl-raceUpgrade go1.20-openssl-docUpgrade go1.19-raceUpgrade go1.20-openssl-raceUpgrade go1.19-docUpgrade go1.19Upgrade go1.19-opensslUpgrade go1.19-openssl-docUpgrade go1.20Upgrade go1.20-docUpgrade go1.20-openssl | Jul 18, 2023 | Jul 11, 2023 |
| Ubuntu | — | Upgrade golang-1.18-src (Ubuntu Pro)Upgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.17-goUpgrade golang-1.17Upgrade golang-1.18-srcUpgrade golang-1.18-goUpgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.17-src | Oct 11, 2024 | Jul 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub