VDB
RHBA-2019%3A3303
RHBA-2019%3A3303
PUBLISHED
CVSS 6.5 MEDIUM
It was discovered that net/http (through net/textproto) in golang does not correctly interpret HTTP requests where an HTTP header contains spaces before the colon. This could be abused by an attacker to smuggle HTTP requests when a proxy or a firewall is placed behind a server implemented in Go or to filter bypasses depending on the specific network configuration.
Risk Scores
CVSS 3.0
6.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-cluster-kube-controller-manager-operator@sha256:0cc51b84b503a0fac694c93fc2ac120edb0cc57f5abaf52d9221f52c83b3c37e_amd64 as a component of Red Hat OpenShift Container Platform 4.2 | openshift4/ose-cluster-kube-controller-manager-operator@sha256:0cc51b84b503a0fac694c93fc2ac120edb0cc57f5abaf52d9221f52c83b3c37e_amd64 |
| Red Hat | openshift4/ose-jenkins-agent-maven@sha256:9f7632f2b3a17cc409a7385aee3ef4ae3e9e268e19296fb8af1fa5929b9bcd96_amd64 as a component of Red Hat OpenShift Container Platform 4.2 | openshift4/ose-jenkins-agent-maven@sha256:9f7632f2b3a17cc409a7385aee3ef4ae3e9e268e19296fb8af1fa5929b9bcd96_amd64 |
| Red Hat | openshift4/ose-cluster-svcat-controller-manager-operator@sha256:c28a97f9960e02f6469588328c5e18a587bdefa310d547e57acfba438fc703db_amd64 as a component of Red Hat OpenShift Container Platform 4.2 | openshift4/ose-cluster-svcat-controller-manager-operator@sha256:c28a97f9960e02f6469588328c5e18a587bdefa310d547e57acfba438fc703db_amd64 |
| Red Hat | openshift4/ose-jenkins@sha256:2d1f8a9ff4bfa1202e17f45a633f94c5a8e2d2b0e15defe1c60e69096fd823f4_amd64 as a component of Red Hat OpenShift Container Platform 4.2 | openshift4/ose-jenkins@sha256:2d1f8a9ff4bfa1202e17f45a633f94c5a8e2d2b0e15defe1c60e69096fd823f4_amd64 |
| Red Hat | openshift4/ose-cloud-credential-operator@sha256:c20053fdd1b497abacb079efd5ac1c8dd485c536940a3f1255b91272bf8b9cec_amd64 as a component of Red Hat OpenShift Container Platform 4.2 | * |
| Red Hat | openshift4/ose-cluster-openshift-controller-manager-operator@sha256:06cd0aa4c5a60cad2a59dfdd81260dcdbe492b8299d08474d2b7a1dbe1975a06_amd64 as a component of Red Hat OpenShift Container Platform 4.2 | openshift4/ose-cluster-openshift-controller-manager-operator@sha256:06cd0aa4c5a60cad2a59dfdd81260dcdbe492b8299d08474d2b7a1dbe1975a06_amd64 |
| Red Hat | openshift4/ose-console@sha256:1e27ffe37d65d8cc12ed0eb9bc93f66ba03ac61fb2e7f2d1f258eba0b3f5159e_amd64 as a component of Red Hat OpenShift Container Platform 4.2 | openshift4/ose-console@sha256:1e27ffe37d65d8cc12ed0eb9bc93f66ba03ac61fb2e7f2d1f258eba0b3f5159e_amd64 |
| Red Hat | openshift4/ose-cluster-dns-operator@sha256:c85d339a52590c58c5c657bcc89cdd5dd2d1db2b17574e89b02b39c065491523_amd64 as a component of Red Hat OpenShift Container Platform 4.2 | openshift4/ose-cluster-dns-operator@sha256:c85d339a52590c58c5c657bcc89cdd5dd2d1db2b17574e89b02b39c065491523_amd64 |
| Red Hat | openshift4/ose-k8s-prometheus-adapter@sha256:9c5629ef379647cdcfa19ba709c061b01759e029d8918cb0595ddcb3aa13ef44_amd64 as a component of Red Hat OpenShift Container Platform 4.2 | * |
| Red Hat | openshift4/ose-gcp-machine-controllers-rhel7@sha256:a2849e3e9ec8e1a089e407c159f2728330e29b0cafe472999bb472719ecbce8c_amd64 as a component of Red Hat OpenShift Container Platform 4.2 | openshift4/ose-gcp-machine-controllers-rhel7@sha256:a2849e3e9ec8e1a089e407c159f2728330e29b0cafe472999bb472719ecbce8c_amd64 |
| Red Hat | openshift4/ose-configmap-reloader@sha256:93cf21818601f537507b0169a0badfd62b1d0d7ff7a1ac988921ee07971b3411_amd64 as a component of Red Hat OpenShift Container Platform 4.2 | openshift4/ose-configmap-reloader@sha256:93cf21818601f537507b0169a0badfd62b1d0d7ff7a1ac988921ee07971b3411_amd64 |
| Red Hat | openshift4/ose-cluster-bootstrap@sha256:4b536cef4b489bee21ceb22ae5c84376d3c9bbfcadaa776e7d07f20a4f165f14_amd64 as a component of Red Hat OpenShift Container Platform 4.2 | openshift4/ose-cluster-bootstrap@sha256:4b536cef4b489bee21ceb22ae5c84376d3c9bbfcadaa776e7d07f20a4f165f14_amd64 |
| Red Hat | openshift4/ose-deployer@sha256:6503f65835b5dcff78593d91f2d5af2439d840f61a031042d836218f05e41e5f_amd64 as a component of Red Hat OpenShift Container Platform 4.2 | openshift4/ose-deployer@sha256:6503f65835b5dcff78593d91f2d5af2439d840f61a031042d836218f05e41e5f_amd64 |
| Red Hat | openshift4/ose-cluster-storage-operator@sha256:33e1fdc4421b9cfdc675b1ee129726ab3ddf26ae6b65b4b173cea9633ebbc594_amd64 as a component of Red Hat OpenShift Container Platform 4.2 | openshift4/ose-cluster-storage-operator@sha256:33e1fdc4421b9cfdc675b1ee129726ab3ddf26ae6b65b4b173cea9633ebbc594_amd64 |
| Red Hat | openshift4/ose-kube-state-metrics@sha256:b3f65d57d0dc9c8b9c3e55ba18d2aee5ef954e21d9ecf9c0dc9fddd97d9edfe6_amd64 as a component of Red Hat OpenShift Container Platform 4.2 | openshift4/ose-kube-state-metrics@sha256:b3f65d57d0dc9c8b9c3e55ba18d2aee5ef954e21d9ecf9c0dc9fddd97d9edfe6_amd64 |
| Red Hat | openshift4/ose-cluster-autoscaler-operator@sha256:e7c293b0b191ee5814f6ef3e137f8f291a274cb88cde73e02f1a61a1da49a32b_amd64 as a component of Red Hat OpenShift Container Platform 4.2 | * |
| Red Hat | openshift4/ose-jenkins-agent-nodejs@sha256:b7637e2e5ef96b9f577ff88c9950aecfaaddeaa8960d343f7c250e22606bf8c6_amd64 as a component of Red Hat OpenShift Container Platform 4.2 | openshift4/ose-jenkins-agent-nodejs@sha256:b7637e2e5ef96b9f577ff88c9950aecfaaddeaa8960d343f7c250e22606bf8c6_amd64 |
| Red Hat | openshift4/ose-azure-machine-controllers@sha256:f48cc84bd7b9a2229da3ef5feb0813334976a386bb6b26825c5d7bbb5220deef_amd64 as a component of Red Hat OpenShift Container Platform 4.2 | openshift4/ose-azure-machine-controllers@sha256:f48cc84bd7b9a2229da3ef5feb0813334976a386bb6b26825c5d7bbb5220deef_amd64 |
| Red Hat | openshift4/ose-node@sha256:fb6bdabf98794c00d2efc5d84527b9f16e513d2b7cf701bb24d8faaf1716e9aa_amd64 as a component of Red Hat OpenShift Container Platform 4.2 | openshift4/ose-node@sha256:fb6bdabf98794c00d2efc5d84527b9f16e513d2b7cf701bb24d8faaf1716e9aa_amd64 |
| Red Hat | openshift4/ose-ironic-static-ip-manager-rhel8@sha256:618d4dd1c805e5e0f392328ee259b2cecb20c9eb4f1620a88b24cad0525df395_amd64 as a component of Red Hat OpenShift Container Platform 4.2 | * |
…and 75 more
Timeline
- Nov 13, 2019 CVE Published
- Feb 26, 2026 CVE Updated
- Apr 30, 2026 Security Advisory
- Apr 30, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHBA-2019:3303 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1755557 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1755780 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1756478 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1757134 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1757234 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1757390 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1758373 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1759181 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1759400 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1759986 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1760044 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1760480 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1761507 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1761814 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1761879 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1761887 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1762409 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1762960 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=1763057 issue
…and 17 more