Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:41303
HistoryJul 17, 2023 - 3:51 a.m.

CRLF Injection

2023-07-1703:51:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
vulnerable
crlf injection
github.com/golang/go
request.host
header

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

0.001 Low

EPSS

Percentile

39.1%

JSON

github.com/golang/go is vulnerable to CRLF Injection. The vulnerability exists because the library does not properly sanitize the Request.Host field, which allows an attacker to send a maliciously crafted Host field through the request header.

Related

ubuntucve 1
prion 1
nessus 65
oraclelinux 7
osv 12
redhatcve 1
amazon 8
cbl_mariner 3
ibm 25
debiancve 1
redhat 35
alpinelinux 1
cve 1
openvas 9
cvelist 1
nvd 1
rocky 2
wolfi 1
almalinux 8
cgr 1
photon 3
freebsd 1
redos 1
gentoo 1
ics 1
ubuntucve
ubuntucve
CVE-2023-29406
2023-07-11 00:00:00
prion
prion
Design/Logic Flaw
2023-07-11 20:15:00
nessus
nessus
Amazon Linux 2 : golist (ALAS-2023-2185)
2023-08-14 00:00:00
Amazon Linux 2 : runc (ALASECS-2023-005)
2023-09-06 00:00:00
Amazon Linux 2 : ecs-init (ALASECS-2024-032)
2024-01-09 00:00:00
oraclelinux
oraclelinux
container-tools:4.0 security and bug fix update
2023-11-22 00:00:00
containernetworking-plugins security and bug fix update
2023-11-11 00:00:00
skopeo security update
2023-11-11 00:00:00
osv
osv
Moderate: container-tools:4.0 security and bug fix update
2023-11-28 22:43:02
BIT-golang-2023-29406
2024-03-06 10:55:04
CVE-2023-29406
2023-07-11 20:15:10
redhatcve
redhatcve
CVE-2023-29406
2023-07-21 07:30:20
amazon
amazon
Important: golang
2023-08-03 18:10:00
Important: golist
2023-08-03 18:10:00
Important: cri-tools
2023-08-03 18:10:00
cbl_mariner
cbl_mariner
CVE-2023-29406 affecting package golang for versions less than 1.20.7-1
2024-07-03 03:08:37
CVE-2023-29406 affecting package golang for versions less than 1.20.7-1
2024-07-03 03:08:31
CVE-2023-29406 affecting package msft-golang for versions less than 1.20.7-1
2024-07-03 03:08:37
ibm
ibm
Security Bulletin: Operations Dashboard is vulnerable to header injection due to Golang Go
2023-10-02 16:06:58
Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to HTTP header injection due to Go CVE-2023-29406
2023-09-14 17:23:24
Security Bulletin: IBM Event Streams is affected by a vulnerability in Golang Go (CVE-2023-29406)
2023-08-01 16:29:09
debiancve
debiancve
CVE-2023-29406
2023-07-11 20:15:10
redhat
redhat
(RHSA-2023:7202) Moderate: container-tools:4.0 security and bug fix update
2023-11-14 16:23:40
(RHSA-2024:0293) Moderate: OpenShift Container Platform 4.14.10 packages and security update
2024-01-23 20:33:05
(RHSA-2023:5721) Important: go-toolset:rhel8 security update
2023-10-16 12:13:12
alpinelinux
alpinelinux
CVE-2023-29406
2023-07-11 20:15:10
cve
cve
CVE-2023-29406
2023-07-11 20:15:10
openvas
openvas
openSUSE: Security Advisory for go1.20 (SUSE-SU-2023:3002-1)
2024-03-04 00:00:00
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2023-3006)
2023-10-31 00:00:00
openSUSE: Security Advisory for go1.19 (SUSE-SU-2023:3841-1)
2024-03-04 00:00:00
cvelist
cvelist
CVE-2023-29406 Insufficient sanitization of Host header in net/http
2023-07-11 19:23:58
nvd
nvd
CVE-2023-29406
2023-07-11 20:15:10
rocky
rocky
container-tools:4.0 security and bug fix update
2023-11-28 22:43:02
Satellite 6.14 security and bug fix update
2023-11-11 22:58:57
wolfi
wolfi
CVE-2023-29406 vulnerabilities
2024-07-03 09:08:38
almalinux
almalinux
Moderate: container-tools:4.0 security and bug fix update
2023-11-14 00:00:00
Moderate: buildah security update
2023-11-07 00:00:00
Moderate: containernetworking-plugins security and bug fix update
2023-11-07 00:00:00
cgr
cgr
CVE-2023-29406 vulnerabilities
2024-05-19 03:07:16
photon
photon
Moderate Photon OS Security Update - PHSA-2023-5.0-0066
2023-08-05 00:00:00
Moderate Photon OS Security Update - PHSA-2023-4.0-0484
2023-10-05 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0644
2023-09-06 00:00:00
freebsd
freebsd
go -- multiple vulnerabilities
2023-04-27 00:00:00
redos
redos
ROS-20240418-06
2024-04-18 00:00:00
gentoo
gentoo
Go: Multiple Vulnerabilities
2023-11-25 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

0.001 Low

EPSS

Percentile

39.1%

JSON
Related for VERACODE:41303
ubuntucve1prion1nessus65oraclelinux7osv12redhatcve1amazon8cbl_mariner3ibm25debiancve1redhat35alpinelinux1cve1openvas9cvelist1nvd1rocky2wolfi1almalinux8cgr1photon3freebsd1redos1gentoo1ics1