Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2022-1705HistoryAug 10, 2022 - 8:15 p.m.
CVE-2022-1705
2022-08-1020:15:25
Debian Security Bug Tracker
security-tracker.debian.org
20
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
0.002 Low
EPSS
Percentile
54.6%
Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go 1.18.4 allows HTTP request smuggling if combined with an intermediate server that also improperly fails to reject the header as invalid.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 10 | all | golang-1.11 | < 1.11.6-1+deb10u4 | golang-1.11_1.11.6-1+deb10u4_all.deb |
| Debian | 11 | all | golang-1.15 | <= 1.15.15-1~deb11u4 | golang-1.15_1.15.15-1~deb11u4_all.deb |
| Debian | 12 | all | golang-1.19 | < 1.19~rc1-1 | golang-1.19_1.19~rc1-1_all.deb |
Related
ubuntucve
ubuntucve
CVE-2022-1705
2022-08-10 00:00:00
alpinelinux
alpinelinux
CVE-2022-1705
2022-08-10 20:15:25
osv
osv
BIT-golang-2022-1705
2024-03-06 11:03:10
Improper sanitization of Transfer-Encoding headers in net/http
2022-07-25 17:34:18
CVE-2022-1705
2022-08-10 20:15:25
nvd
nvd
CVE-2022-1705
2022-08-10 20:15:25
ibm
ibm
cve
cve
CVE-2022-1705
2022-08-10 20:15:25
cvelist
cvelist
CVE-2022-1705 Improper sanitization of Transfer-Encoding headers in net/http
2022-08-09 20:16:57
prion
prion
Design/Logic Flaw
2022-08-10 20:15:00
cbl_mariner
cbl_mariner
CVE-2022-1705 affecting package golang 1.18.3-1
2022-09-17 05:56:44
CVE-2022-1705 affecting package golang for versions less than 1.18.5-1
2022-09-16 06:05:39
redhatcve
redhatcve
CVE-2022-1705
2022-07-15 10:32:19
veracode
veracode
Request Smuggling
2022-07-25 04:55:56
nessus
nessus
RHEL 9 : butane (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 8 : butane (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 8 : OpenShift Container Platform 4.11.17 packages and (RHSA-2022:8626)
2023-01-23 00:00:00
redhat
redhat
almalinux
almalinux
Moderate: toolbox security and bug fix update
2022-11-15 00:00:00
Moderate: grafana-pcp security update
2022-11-15 00:00:00
Moderate: grafana-pcp security update
2022-11-08 00:00:00
rocky
rocky
toolbox security and bug fix update
2022-11-15 06:15:31
grafana-pcp security update
2022-11-15 06:19:30
grafana-pcp security update
2022-11-08 06:25:29
oraclelinux
oraclelinux
grafana-pcp security update
2022-11-15 00:00:00
grafana-pcp security update
2022-11-22 00:00:00
go-toolset:ol8 security and bug fix update
2022-08-03 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2022-0262)
2022-07-18 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:2671-1)
2022-08-05 00:00:00
openSUSE: Security Advisory for go1.17 (SUSE-SU-2022:2671-1)
2022-08-05 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package golang version 1.18.4-alt1
2022-07-28 00:00:00
Security fix for the ALT Linux 10 package golang version 1.17.12-alt1.p10
2022-07-29 00:00:00
freebsd
freebsd
go -- multiple vulnerabilities
2022-07-12 00:00:00
mageia
mageia
Updated golang packages fix security vulnerability
2022-07-16 22:58:20
suse
suse
Security update for go1.17 (important)
2022-08-04 00:00:00
Security update for go1.18 (important)
2022-08-04 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2022-0242
2022-09-07 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0242
2022-09-07 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: fzf-0.29.0-2.fc35
2022-08-17 01:36:21
amazon
amazon
Important: go-rpm-macros
2022-10-17 21:46:00
Important: golang-googlecode-net
2022-10-17 21:46:00
Important: golang-github-godbus-dbus
2022-10-17 21:46:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
0.002 Low
EPSS
Percentile
54.6%
Related for DEBIANCVE:CVE-2022-1705