CVE-2021-33197
In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy (from net/http/httputil) result in a situation where an attacker is...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy (from net/http/httputil) result in a situation where an attacker is able to drop arbitrary headers.
Paquets affectés
Bitnami
golang
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.15.13"},{"introduced":"1.16.0"},{"fixed":"1.16.5"}]}]
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2021-33197 golang-1.15 Corrigé dans: 1.15.9-5
Références
- advisory groups.google.com
- advisory groups.google.com
- advisory security.gentoo.org
- web nvd.nist.gov