Количество 21
Количество 21
CVE-2023-29406
The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value.
CVE-2023-29406
The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value.
CVE-2023-29406
The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value.
CVE-2023-29406
Insufficient sanitization of Host header in net/http
CVE-2023-29406
The HTTP/1 client does not fully validate the contents of the Host hea ...
SUSE-SU-2023:3002-1
Security update for go1.20-openssl
SUSE-SU-2023:2846-1
Security update for go1.20
SUSE-SU-2023:2845-1
Security update for go1.19
GHSA-f8f7-69v5-w4vx
The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value.
ELSA-2023-7202
ELSA-2023-7202: container-tools:4.0 security and bug fix update (MODERATE)
BDU:2024-03155
Уязвимость языка программирования Golang, связанная с отсутствием проверки содержимого заголовка Host, позволяющая нарушителю выполнять произвольный код
SUSE-SU-2023:3841-1
Security update for go1.19-openssl
ROS-20241017-01
Множественные уязвимости golang
ELSA-2023-6402
ELSA-2023-6402: containernetworking-plugins security and bug fix update (MODERATE)
SUSE-SU-2024:3656-1
Security update for etcd
ELSA-2023-6473
ELSA-2023-6473: buildah security update (MODERATE)
ELSA-2023-6363
ELSA-2023-6363: skopeo security update (MODERATE)
ELSA-2023-6474
ELSA-2023-6474: podman security, bug fix, and enhancement update (MODERATE)
ELSA-2023-6938
ELSA-2023-6938: container-tools:4.0 security and bug fix update (MODERATE)
ROS-20240418-06
Множественные уязвимости buildah
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-29406 The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value. | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад |
 | CVE-2023-29406 The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value. | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад |
 | CVE-2023-29406 The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value. | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад |
 | CVE-2023-29406 Insufficient sanitization of Host header in net/http | CVSS3: 6.5 | 0% Низкий | около 2 месяцев назад |
| CVE-2023-29406 The HTTP/1 client does not fully validate the contents of the Host hea ... | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад |
 | SUSE-SU-2023:3002-1 Security update for go1.20-openssl | 0% Низкий | около 2 лет назад | |
| SUSE-SU-2023:2846-1 Security update for go1.20 | 0% Низкий | больше 2 лет назад | |
| SUSE-SU-2023:2845-1 Security update for go1.19 | 0% Низкий | больше 2 лет назад | |
| GHSA-f8f7-69v5-w4vx The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value. | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад |
| ELSA-2023-7202 ELSA-2023-7202: container-tools:4.0 security and bug fix update (MODERATE) | почти 2 года назад | ||
 | BDU:2024-03155 Уязвимость языка программирования Golang, связанная с отсутствием проверки содержимого заголовка Host, позволяющая нарушителю выполнять произвольный код | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад |
| SUSE-SU-2023:3841-1 Security update for go1.19-openssl | около 2 лет назад | ||
 | ROS-20241017-01 Множественные уязвимости golang | CVSS3: 9.8 | около 1 года назад | |
| ELSA-2023-6402 ELSA-2023-6402: containernetworking-plugins security and bug fix update (MODERATE) | почти 2 года назад | ||
| SUSE-SU-2024:3656-1 Security update for etcd | около 1 года назад | ||
| ELSA-2023-6473 ELSA-2023-6473: buildah security update (MODERATE) | почти 2 года назад | ||
| ELSA-2023-6363 ELSA-2023-6363: skopeo security update (MODERATE) | почти 2 года назад | ||
| ELSA-2023-6474 ELSA-2023-6474: podman security, bug fix, and enhancement update (MODERATE) | почти 2 года назад | ||
| ELSA-2023-6938 ELSA-2023-6938: container-tools:4.0 security and bug fix update (MODERATE) | почти 2 года назад | ||
| ROS-20240418-06 Множественные уязвимости buildah | CVSS3: 9.8 | больше 1 года назад |
Уязвимостей на страницу