The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podmanUpgrade skopeo-testsUpgrade criu-develUpgrade podman-remoteUpgrade containers-commonUpgrade criu-libsUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade toolboxUpgrade libslirp-develUpgrade skopeoUpgrade oci-seccomp-bpf-hookUpgrade netavarkUpgrade podman-dockerUpgrade critUpgrade podman-testsUpgrade fuse-overlayfsUpgrade udicaUpgrade conmonUpgrade buildahUpgrade buildah-testsUpgrade runcUpgrade toolbox-testsUpgrade podman-catatonitUpgrade cockpit-podmanUpgrade podman-gvproxyUpgrade aardvark-dnsUpgrade libslirpUpgrade crunUpgrade python3-criuUpgrade python3-podmanUpgrade criuUpgrade slirp4netns | Nov 16, 2023 | Jul 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Jul 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golangUpgrade golang-miscUpgrade cri-tools-debuginfoUpgrade cri-toolsUpgrade ecs-initUpgrade nerdctlUpgrade golang-docsUpgrade containerd-stressUpgrade cni-pluginsUpgrade nerdctl-debuginfoUpgrade golist-debuginfoUpgrade golang-binUpgrade golang-sharedUpgrade golang-srcUpgrade cni-plugins-debuginfoUpgrade amazon-ssm-agent-debuginfoUpgrade amazon-ssm-agentUpgrade runc-debuginfoUpgrade golang-testsUpgrade golistUpgrade containerdUpgrade runcUpgrade containerd-debuginfo | Aug 9, 2023 | Jul 11, 2023 |
| Amazon_linux | — | Upgrade golangUpgrade containerd | Oct 7, 2023 | Jul 11, 2023 |
| Amazon_linux_2023 | — | Upgrade cni-plugins-debugsourceUpgrade containerdUpgrade ecs-initUpgrade oci-add-hooks-debuginfoUpgrade nerdctlUpgrade containerd-stressUpgrade amazon-ssm-agent-debuginfoUpgrade amazon-ecr-credential-helperUpgrade golang-binUpgrade golang-sharedUpgrade golang-docsUpgrade runcUpgrade containerd-debuginfoUpgrade golang-testsUpgrade amazon-ssm-agentUpgrade amazon-ssm-agent-debugsourceUpgrade containerd-debugsourceUpgrade oci-add-hooksUpgrade runc-debuginfoUpgrade containerd-stress-debuginfoUpgrade golang-miscUpgrade docker-debugsourceUpgrade cni-pluginsUpgrade docker-debuginfoUpgrade oci-add-hooks-debugsourceUpgrade dockerUpgrade cni-plugins-debuginfoUpgrade runc-debugsourceUpgrade golang-srcUpgrade golang | Feb 17, 2025 | Jul 11, 2023 |
| Centos_linux | — | Upgrade skopeo-debugsourceUpgrade udicaUpgrade satellite-cliUpgrade criuUpgrade buildah-debugsourceUpgrade podman-catatonit-debuginfoUpgrade rubygem-hammer_cli_foreman_adminUpgrade podman-remoteUpgrade runc-debugsourceUpgrade podman-remote-debuginfoUpgrade rubygem-unicode-display_widthUpgrade podman-debuginfoUpgrade rubygem-foreman_maintainUpgrade python3-criuUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_templatesUpgrade crun-debugsourceUpgrade rubygem-netrcUpgrade toolboxUpgrade toolbox-debugsourceUpgrade golang-testsUpgrade rubygem-mime-typesUpgrade rubygem-hashieUpgrade rubygem-mime-types-dataUpgrade toolbox-debuginfoUpgrade aardvark-dnsUpgrade podman-catatonitUpgrade podman-pluginsUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podmanUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade slirp4netns-debuginfoUpgrade podman-plugins-debuginfoUpgrade containernetworking-pluginsUpgrade rubygem-oauth-ttyUpgrade rubygem-hammer_cli_foremanUpgrade golang-docsUpgrade criu-debugsourceUpgrade criu-libs-debuginfoUpgrade critUpgrade fuse-overlayfsUpgrade fuse-overlayfs-debuginfoUpgrade golang-binUpgrade containers-commonUpgrade delve-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade rubygem-multi_jsonUpgrade fuse-overlayfs-debugsourceUpgrade rubygem-powerbarUpgrade satellite-maintainUpgrade skopeoUpgrade podman-gvproxy-debuginfoUpgrade runcUpgrade rubygem-little-pluggerUpgrade toolbox-testsUpgrade libslirp-debugsourceUpgrade rubygem-ffiUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-unf_ext-debugsourceUpgrade skopeo-debuginfoUpgrade rubygem-version_gemUpgrade runc-debuginfoUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade libslirpUpgrade conmonUpgrade criu-debuginfoUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade podman-gvproxyUpgrade rubygem-oauthUpgrade buildah-testsUpgrade golang-miscUpgrade delveUpgrade crunUpgrade criu-develUpgrade container-selinuxUpgrade rubygem-snaky_hashUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cliUpgrade python3-podmanUpgrade podman-testsUpgrade conmon-debuginfoUpgrade rubygem-gssapiUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade buildah-debuginfoUpgrade rubygem-http-acceptUpgrade podman-debugsourceUpgrade buildah-tests-debuginfoUpgrade buildahUpgrade python39-pulp_manifestUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-domain_nameUpgrade podman-dockerUpgrade netavarkUpgrade conmon-debugsourceUpgrade rubygem-clampUpgrade rubygem-fast_gettextUpgrade slirp4netns-debugsourceUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade golang-srcUpgrade containernetworking-plugins-debugsourceUpgrade cockpit-podmanUpgrade rubygem-ffi-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade golangUpgrade crun-debuginfoUpgrade rubygem-unicode-debuginfoUpgrade rubygem-unf_extUpgrade rubygem-rest-clientUpgrade rubygem-highlineUpgrade rubygem-apipie-bindingsUpgrade delve-debuginfoUpgrade criu-libsUpgrade rubygem-unicode-debugsourceUpgrade libslirp-develUpgrade golang-raceUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-ffi-debugsourceUpgrade rubygem-amazing_printUpgrade go-toolsetUpgrade foreman-cliUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netnsUpgrade skopeo-testsUpgrade rubygem-localeUpgrade rubygem-unicode | Nov 1, 2023 | Jul 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | Jul 11, 2023 |
| Freebsd | — | Upgrade go119Upgrade go120 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Jul 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jan 10, 2024 | Jul 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Jan 10, 2024 | Jul 11, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golangUpgrade golang-binUpgrade golang-src | Feb 12, 2024 | Jul 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Jan 10, 2024 | Jul 11, 2023 |
| Oracle_linux | — | Upgrade critUpgrade cockpit-podmanUpgrade runcUpgrade podman-gvproxyUpgrade buildahUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade container-selinuxUpgrade podman-dockerUpgrade python3-criuUpgrade criu-libsUpgrade containers-commonUpgrade aardvark-dnsUpgrade buildah-testsUpgrade oci-seccomp-bpf-hookUpgrade udicaUpgrade conmonUpgrade criu-develUpgrade crunUpgrade podmanUpgrade skopeo-testsUpgrade fuse-overlayfsUpgrade podman-testsUpgrade libslirp-develUpgrade podman-catatonitUpgrade slirp4netnsUpgrade skopeoUpgrade criuUpgrade python3-podmanUpgrade podman-pluginsUpgrade netavarkUpgrade libslirp | Nov 16, 2023 | Jul 11, 2023 |
| Redhat Openshift | — | Upgrade openshiftUpgrade openshift-clients | Nov 16, 2023 | Jul 11, 2023 |
| Redhat_linux | — | Upgrade conmonUpgrade podman-debugsourceUpgrade criu-develUpgrade crun-debuginfoUpgrade buildah-debugsourceUpgrade skopeoUpgrade slirp4netnsUpgrade skopeo-testsUpgrade toolbox-testsUpgrade skopeo-debuginfoUpgrade crunUpgrade podman-dockerNo solution existsUpgrade podman-gvproxyUpgrade podman-pluginsUpgrade cockpit-podmanUpgrade containernetworking-plugins-debugsourceUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-raceUpgrade golang-docsUpgrade libslirpUpgrade slirp4netns-debuginfoUpgrade toolboxUpgrade udicaUpgrade netavarkUpgrade fuse-overlayfs-debuginfoUpgrade python3-podmanUpgrade delveUpgrade podman-testsUpgrade delve-debugsourceUpgrade podman-catatonit-debuginfoUpgrade podman-catatonitUpgrade toolbox-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade runc-debuginfoUpgrade buildah-debuginfoUpgrade criu-libsUpgrade criu-libs-debuginfoUpgrade crun-debugsourceUpgrade criu-debuginfoUpgrade golang-binUpgrade buildahUpgrade libslirp-debuginfoUpgrade criu-debugsourceUpgrade runc-debugsourceUpgrade criuUpgrade containers-commonUpgrade podman-remote-debuginfoUpgrade critUpgrade golang-srcUpgrade containernetworking-pluginsUpgrade aardvark-dnsUpgrade podmanUpgrade container-selinuxUpgrade buildah-tests-debuginfoUpgrade golangUpgrade podman-plugins-debuginfoUpgrade golang-miscUpgrade python3-criuUpgrade podman-debuginfoUpgrade conmon-debuginfoUpgrade toolbox-debugsourceUpgrade golang-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade fuse-overlayfsUpgrade conmon-debugsourceUpgrade skopeo-debugsourceUpgrade libslirp-develUpgrade go-toolsetUpgrade buildah-testsUpgrade delve-debuginfoUpgrade runcUpgrade podman-remoteUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfs-debugsourceUpgrade libslirp-debugsource | Nov 1, 2023 | Jul 11, 2023 |
| Rocky_linux | — | Upgrade containers-commonUpgrade toolbox-debuginfoUpgrade runcUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade slirp4netns-debuginfoUpgrade containernetworking-pluginsUpgrade toolbox-debugsourceUpgrade libdb-sql-devel-debuginfoUpgrade podman-remoteUpgrade containernetworking-plugins-debuginfoUpgrade crun-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade python3-criuUpgrade podman-debugsourceUpgrade libslirp-debuginfoUpgrade slirp4netns-debugsourceUpgrade critUpgrade criu-libs-debuginfoUpgrade criuUpgrade buildahUpgrade oci-seccomp-bpf-hookUpgrade libdb-debugsourceUpgrade skopeoUpgrade fuse-overlayfs-debugsourceUpgrade criu-debugsourceUpgrade aardvark-dnsUpgrade buildah-debuginfoUpgrade buildah-testsUpgrade libslirp-debugsourceUpgrade podman-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-remote-debuginfoUpgrade podmanUpgrade podman-catatonitUpgrade runc-debugsourceUpgrade conmon-debuginfoUpgrade podman-gvproxyUpgrade skopeo-testsUpgrade criu-debuginfoUpgrade skopeo-debuginfoUpgrade buildah-tests-debuginfoUpgrade libdb-utils-debuginfoUpgrade podman-catatonit-debuginfoUpgrade buildah-debugsourceUpgrade criu-libsUpgrade crun-debuginfoUpgrade runc-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podman-pluginsUpgrade podman-testsUpgrade libslirpUpgrade netavarkUpgrade libdb-cxxUpgrade fuse-overlayfsUpgrade libdb-cxx-debuginfoUpgrade toolbox-testsUpgrade slirp4netnsUpgrade libdb-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade skopeo-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade conmonUpgrade toolboxUpgrade libslirp-develUpgrade libdb-sql-debuginfoUpgrade conmon-debugsourceUpgrade criu-develUpgrade crun | Mar 5, 2024 | Jul 11, 2023 |
| Suse | — | Upgrade go1.19-openssl-raceUpgrade go1.20-openssl-raceUpgrade go1.20-openssl-docUpgrade go1.20-raceUpgrade go1.19-raceUpgrade go1.20Upgrade go1.19-opensslUpgrade go1.20-opensslUpgrade go1.20-docUpgrade go1.19-docUpgrade go1.19-openssl-docUpgrade go1.19 | Jul 18, 2023 | Jul 11, 2023 |
| Ubuntu | — | Upgrade golang-1.18-srcUpgrade golang-1.17-goUpgrade golang-1.17Upgrade golang-1.18-goUpgrade golang-1.17-srcUpgrade golang-1.18 (Ubuntu Pro)Upgrade golang-1.18-go (Ubuntu Pro)Upgrade golang-1.18Upgrade golang-1.18-src (Ubuntu Pro) | Oct 11, 2024 | Jul 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub