Lucene search
F5F5:K92930514HistoryJul 25, 2016 - 12:00 a.m.
K92930514 : GO vulnerability CVE-2016-5386
2016-07-2500:00:00
my.f5.com
33
Security Advisory Description
The net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application’s outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an “httpoxy” issue. (CVE-2016-5386)
Impact
There is no impact; F5 products are not affected by this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| big-ip afm | eq | 11.4.0 | |
| big-ip afm | eq | 11.4.1 | |
| big-ip afm | eq | 11.5.0 | |
| big-ip afm | eq | 11.5.1 | |
| big-ip afm | eq | 11.5.2 | |
| big-ip afm | eq | 11.5.3 | |
| big-ip afm | eq | 11.5.4 | |
| big-ip afm | eq | 11.6.0 | |
| big-ip afm | eq | 11.6.1 | |
| big-ip afm | eq | 12.0.0 |
Related
openvas
openvas
CentOS Update for golang CESA-2016:1538 centos7
2016-08-08 00:00:00
Mageia: Security Advisory (MGASA-2016-0317)
2022-01-28 00:00:00
Fedora Update for golang FEDORA-2016-340e361b90
2016-08-04 00:00:00
fedora
fedora
[SECURITY] Fedora 24 Update: golang-1.6.3-1.fc24
2016-07-28 23:58:56
[SECURITY] Fedora 23 Update: golang-1.5.4-2.fc23
2016-07-29 02:54:15
cve
cve
CVE-2016-5386
2016-07-19 02:00:18
CVE-2016-1000101
2016-10-06 14:59:17
cvelist
cvelist
CVE-2016-5386
2016-07-19 01:00:00
mageia
mageia
Updated golang package fixes security vulnerability
2016-09-23 23:57:12
oraclelinux
oraclelinux
golang security, bug fix, and enhancement update
2016-08-02 00:00:00
huawei
huawei
Security Advisory - A CGI application vulnerability in Some Huawei Products
2017-11-29 00:00:00
nessus
nessus
openSUSE Security Update : go (openSUSE-2016-979) (httpoxy)
2016-08-12 00:00:00
Fedora 24 : golang (2016-ea5e284d34) (httpoxy)
2016-07-29 00:00:00
veracode
veracode
HTTPoxy Vulnerability
2017-05-03 02:22:45
amazon
amazon
Medium: golang
2016-08-17 13:30:00
f5
f5
SOL92930514 - GO vulnerability CVE-2016-5386
2016-07-25 00:00:00
redhatcve
redhatcve
CVE-2016-5386
2020-04-07 16:54:43
osv
osv
Improper input validation in net/http and net/http/cgi
2022-08-09 17:05:15
prion
prion
Design/Logic Flaw
2016-07-19 02:00:00
Design/Logic Flaw
2016-10-06 14:59:00
nvd
nvd
CVE-2016-5386
2016-07-19 02:00:18
CVE-2016-1000101
2016-10-06 14:59:17
ubuntucve
ubuntucve
CVE-2016-5386
2016-07-18 00:00:00
cloudfoundry
cloudfoundry
Multiple CVEs: httpoxy | Cloud Foundry
2016-12-21 00:00:00
ibm
ibm
redhat
redhat
(RHSA-2016:1538) Moderate: golang security, bug fix, and enhancement update
2016-08-02 13:46:33
centos
centos
golang security update
2016-08-02 21:57:55
threatpost
threatpost
CGI Script Vulnerability 'Httpoxy' Allows Man-in-the-Middle Attack
2016-07-18 18:00:46
checkpoint_advisories
checkpoint_advisories
cert
cert
impervablog
impervablog
Python and Go Top the Chart of 2019’s Most Popular Hacking Tools
2020-05-27 09:22:21
oracle
oracle
Oracle Critical Patch Update Advisory - July 2017
2018-03-20 00:00:00