CVE-2015-5740: Critical severity golang vulnerability
The net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows remote attackers to conduct HTTP request smuggling attacks via a request with two Content-length headers.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability CVE-2015-5740 about?
CVE-2015-5740 involves improper HTTP header parsing in the Go programming language's net/http library, enabling potential HTTP request smuggling attacks.
What versions of Go are affected by CVE-2015-5740?
CVE-2015-5740 affects Go versions before 1.4.3.
How can I fix the CVE-2015-5740 vulnerability?
To fix CVE-2015-5740, update the Go programming language to version 1.4.3 or later.
Which operating systems are impacted by CVE-2015-5740?
CVE-2015-5740 impacts several operating systems, including Fedora 21, Fedora 22, and various versions of Red Hat Enterprise Linux.
What are the potential risks of CVE-2015-5740?
The risk of CVE-2015-5740 includes the possibility of remote attackers executing HTTP request smuggling attacks, leading to security breaches.