Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:21580
HistorySep 27, 2019 - 3:44 a.m.

HTTP Request Smuggling

2019-09-2703:44:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
17

EPSS

0.012

Percentile

85.7%

JSON

github.com/golang/go is vulnerable to HTTP request smuggling. The vulnerability exists as invalid HTTP/1.1 headers were accepted and normalized with a space before the colon, allowing a reverse proxy to interpret the headers differently.

References

Related

openvas 11
redhatcve 1
ibm 6
altlinux 1
alpinelinux 1
prion 1
osv 7
cbl_mariner 1
freebsd 1
nessus 29
ubuntucve 1
redhat 3
amazon 5
debian 3
cve 1
checkpoint_advisories 1
symantec 1
fedora 4
debiancve 1
cvelist 1
nvd 1
suse 2
oraclelinux 4
threatpost 4
photon 5
openvas
openvas
Debian: Security Advisory (DSA-4534-1)
2019-09-30 00:00:00
Fedora Update for golang FEDORA-2019-1b8cbd39ff
2020-01-09 00:00:00
openSUSE: Security Advisory for go1.12 (openSUSE-SU-2019:2521-1)
2019-11-18 00:00:00
redhatcve
redhatcve
CVE-2019-16276
2019-09-26 14:21:04
ibm
ibm
Security Bulletin: IBM Event Streams is affected by Go vulnerability CVE-2019-16276
2020-06-11 16:15:07
Security Bulletin: A Security Vulnerability affects IBM Cloud Private - Go (CVE-2019-16276)
2020-06-09 16:56:48
Security Bulletin: Vulnerability in Go programming language affects IBM Spectrum Protect Server (CVE-2019-16276)
2020-06-12 22:03:29
altlinux
altlinux
Security fix for the ALT Linux 10 package golang version 1.12.10-alt1
2019-10-10 00:00:00
alpinelinux
alpinelinux
CVE-2019-16276
2019-09-30 19:15:08
prion
prion
Design/Logic Flaw
2019-09-30 19:15:00
osv
osv
CVE-2019-16276
2019-09-30 19:15:08
Request smuggling due to accepting invalid headers in net/http via net/textproto
2022-05-23 22:46:20
golang-1.11 - security update
2019-09-27 00:00:00
cbl_mariner
cbl_mariner
CVE-2019-16276 affecting package python-tensorboard for versions less than 2.16.2-2
2024-07-24 01:44:36
freebsd
freebsd
go -- invalid headers are normalized, allowing request smuggling
2019-09-25 00:00:00
nessus
nessus
Debian DSA-4534-1 : golang-1.11 - security update
2019-09-30 00:00:00
Fedora 29 : golang (2019-e99c1603c3)
2019-10-15 00:00:00
FreeBSD : go -- invalid headers are normalized, allowing request smuggling (a92dcc5c-e05c-11e9-b589-10c37b4ac2ea)
2019-09-30 00:00:00
ubuntucve
ubuntucve
CVE-2019-16276
2019-09-30 00:00:00
redhat
redhat
(RHSA-2020:0652) Moderate: OpenShift Container Platform 4.2.21 openshift/installer security update
2020-03-05 20:08:21
(RHSA-2020:0101) Moderate: go-toolset-1.12-golang security update
2020-01-14 08:24:12
(RHSA-2020:0329) Moderate: go-toolset:rhel8 security update
2020-02-04 08:35:13
amazon
amazon
Medium: golang
2019-11-19 17:31:00
Medium: golang
2019-10-21 18:01:00
Medium: golang
2020-01-14 20:01:00
debian
debian
[SECURITY] [DSA 4534-1] golang-1.11 security update
2019-09-27 20:36:57
[SECURITY] [DLA 2591-1] golang-1.7 security update
2021-03-13 18:37:17
[SECURITY] [DLA 2592-1] golang-1.8 security update
2021-03-13 18:37:54
cve
cve
CVE-2019-16276
2019-09-30 19:15:08
checkpoint_advisories
checkpoint_advisories
Kubernetes Go Server Authentication Bypass (CVE-2019-16276)
2019-10-22 00:00:00
symantec
symantec
Golang Go CVE-2019-16276 HTTP Request Smuggling Vulnerability
2019-09-26 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: golang-1.13.1-1.fc31
2019-10-08 00:29:14
[SECURITY] Fedora 30 Update: golang-1.12.10-1.fc30
2019-10-09 16:54:30
[SECURITY] Fedora 30 Update: golang-1.12.13-1.fc30
2019-11-12 02:09:13
debiancve
debiancve
CVE-2019-16276
2019-09-30 19:15:08
cvelist
cvelist
CVE-2019-16276
2019-09-30 18:40:12
nvd
nvd
CVE-2019-16276
2019-09-30 19:15:08
suse
suse
Security update for go1.12 (moderate)
2019-11-17 00:00:00
Security update for go1.12 (moderate)
2019-11-17 00:00:00
oraclelinux
oraclelinux
olcne kubernetes security update
2020-04-17 00:00:00
go-toolset:ol8 security update
2020-02-17 00:00:00
kubernetes security update
2020-01-31 00:00:00
threatpost
threatpost
ThreatList: One-Third of Firms Say Their Container Security Lags
2018-11-23 13:00:48
Public Bug Bounty Takes Aim at Kubernetes Container Project
2020-01-14 17:00:28
Dangerous Kubernetes Bugs Allow Authentication Bypass, DoS
2019-10-17 14:25:39
photon
photon
Critical Photon OS Security Update - PHSA-2019-0037
2019-11-01 00:00:00
Important Photon OS Security Update - PHSA-2019-3.0-0037
2019-10-31 00:00:00
Important Photon OS Security Update - PHSA-2020-0200
2020-01-14 00:00:00

EPSS

0.012

Percentile

85.7%

JSON
Related for VERACODE:21580
openvas11redhatcve1ibm6altlinux1alpinelinux1prion1osv7cbl_mariner1freebsd1nessus29ubuntucve1redhat3amazon5debian3cve1checkpoint_advisories1symantec1fedora4debiancve1cvelist1nvd1suse2oraclelinux4threatpost4photon5