CVE catalog

CVE-2024-24791

Go vulnerabilities

[CVE catalog]

Severity
Medium · CVSS 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
1.41% · Oct 25, 2026

The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-informational (200 or higher) status. This mishandling could leave a client connection in an invalid state, where the next request sent on the connection will fail. An attacker sending a request to a net/http/httputil.ReverseProxy proxy can exploit this mishandling to cause a denial of service by sending "Expect: 100-continue" requests which elicit a non-informational response from the backend. Each such request leaves the proxy with an invalid connection, and causes one subsequent request using that connection to fail.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiangolang-1.19bookworm1.19.8-2vulnerable
Ubuntugolang-1.19nobleNot reportedvulnerable
Ubuntugolang-1.22noble1.22.2-2ubuntu0.3fixed
Ubuntugolang-1.22-docnoble1.22.2-2ubuntu0.3fixed
Ubuntugolang-1.22-gonoble1.22.2-2ubuntu0.3fixed
Ubuntugolang-1.22-srcnoble1.22.2-2ubuntu0.3fixed
Ubuntugolang-1.1014.041.10.4-2ubuntu1~14.04.1vulnerable
Ubuntugolang-1.18pro1.18.1-1ubuntu1~18.04.3vulnerable
Ubuntugolang-1.18pro1.18.1-1ubuntu1~18.04.4vulnerable
Ubuntugolang-1.18pro1.18.1-1ubuntu1~18.04.4+esm1fixed
Ubuntugolang-1.1016.041.10.4-2ubuntu1~16.04.1vulnerable
Ubuntugolang-1.1016.041.10.4-2ubuntu1~16.04.2vulnerable
Ubuntugolang-1.616.041.6-0ubuntu1vulnerable
Ubuntugolang-1.616.041.6-0ubuntu2vulnerable
Ubuntugolang-1.616.041.6-0ubuntu3vulnerable
Ubuntugolang-1.616.041.6-0ubuntu4vulnerable
Ubuntugolang-1.616.041.6-0ubuntu5vulnerable
Ubuntugolang-1.616.041.6.1-0ubuntu1vulnerable
Ubuntugolang-1.616.041.6.2-0ubuntu5~16.04vulnerable
Ubuntugolang-1.616.041.6.2-0ubuntu5~16.04.2vulnerable
Ubuntugolang-1.616.041.6.2-0ubuntu5~16.04.3vulnerable
Ubuntugolang-1.616.041.6.2-0ubuntu5~16.04.4vulnerable
Ubuntugolang-1.13pro1.13.8-1ubuntu2vulnerable
Ubuntugolang-1.13pro1.13.8-1ubuntu2.22.04.1vulnerable
Ubuntugolang-1.13pro1.13.8-1ubuntu2.22.04.1+esm1vulnerable
Ubuntugolang-1.13pro1.13.8-1ubuntu2.22.04.2vulnerable
Ubuntugolang-1.1018.041.10~rc1-1vulnerable
Ubuntugolang-1.1018.041.10~rc1-1ubuntu1vulnerable
Ubuntugolang-1.1018.041.10~rc1-2ubuntu1vulnerable
Ubuntugolang-1.1018.041.10~rc2-1ubuntu1vulnerable
Ubuntugolang-1.1018.041.10-1ubuntu1vulnerable
Ubuntugolang-1.1018.041.10.1-1ubuntu2vulnerable
Ubuntugolang-1.1018.041.10.4-2ubuntu1~18.04.1vulnerable
Ubuntugolang-1.1018.041.10.4-2ubuntu1~18.04.2vulnerable
Ubuntugolang-1.16pro1.16.2-0ubuntu1~20.04vulnerable
Ubuntugolang-1.16pro1.16.2-0ubuntu1~20.04.1vulnerable
Ubuntugolang-1.16pro1.16.2-0ubuntu1~20.04.1+esm1vulnerable
Ubuntugolang-1.818.041.8.3-2ubuntu1vulnerable
Ubuntugolang-1.818.041.8.3-2ubuntu1.18.04.1vulnerable
Ubuntugolang-1.918.041.9.1-2ubuntu1vulnerable
Ubuntugolang-1.918.041.9.2-1ubuntu1vulnerable
Ubuntugolang-1.918.041.9.2-3ubuntu1vulnerable
Ubuntugolang-1.918.041.9.3-1ubuntu1vulnerable
Ubuntugolang-1.918.041.9.4-1ubuntu1vulnerable
Ubuntugolang-1.1820.041.18.1-1ubuntu1~20.04.1vulnerable
Ubuntugolang-1.1820.041.18.1-1ubuntu1~20.04.2vulnerable
Ubuntugolang-1.1820.041.18.1-1ubuntu1~20.04.3fixed
Ubuntugolang-1.2220.041.22.2-2~20.04.1vulnerable
Ubuntugolang-1.2220.041.22.2-2~20.04.2fixed
Ubuntugolang-1.1320.041.13.1-1ubuntu1vulnerable
Ubuntugolang-1.1320.041.13.3-1ubuntu1vulnerable
Ubuntugolang-1.1320.041.13.4-1ubuntu1vulnerable
Ubuntugolang-1.1320.041.13.5-1ubuntu1vulnerable
Ubuntugolang-1.1320.041.13.6-1ubuntu1vulnerable
Ubuntugolang-1.1320.041.13.6-2ubuntu1vulnerable
Ubuntugolang-1.1320.041.13.7-1ubuntu1vulnerable
Ubuntugolang-1.1320.041.13.8-1ubuntu1vulnerable
Ubuntugolang-1.1320.041.13.8-1ubuntu1.1vulnerable
Ubuntugolang-1.1320.041.13.8-1ubuntu1.2vulnerable
Ubuntugolang-1.1420.041.14~beta1-1vulnerable
Ubuntugolang-1.1420.041.14~beta1-2vulnerable
Ubuntugolang-1.1420.041.14~rc1-1vulnerable
Ubuntugolang-1.1420.041.14-1vulnerable
Ubuntugolang-1.1420.041.14.1-1vulnerable
Ubuntugolang-1.1420.041.14.2-1vulnerable
Ubuntugolang-1.1420.041.14.2-1ubuntu1vulnerable
Ubuntugolang-1.1420.041.14.3-2ubuntu2~20.04.1vulnerable
Ubuntugolang-1.1420.041.14.3-2ubuntu2~20.04.2vulnerable
Ubuntugolang-1.2020.041.20.3-1ubuntu0.1~20.04vulnerable
Ubuntugolang-1.2020.041.20.3-1ubuntu0.1~20.04.1vulnerable
Ubuntugolang-1.2120.041.21.1-1~ubuntu20.04.1vulnerable
Ubuntugolang-1.2120.041.21.1-1~ubuntu20.04.2vulnerable
Ubuntugolang-1.2120.041.21.1-1~ubuntu20.04.3vulnerable
Ubuntugolang-1.1722.041.17-1ubuntu2vulnerable
Ubuntugolang-1.1722.041.17.3-1ubuntu1vulnerable
Ubuntugolang-1.1722.041.17.3-1ubuntu2vulnerable
Ubuntugolang-1.1722.041.17.13-3ubuntu1vulnerable
Ubuntugolang-1.1722.041.17.13-3ubuntu1.2vulnerable
Ubuntugolang-1.1722.041.17.13-3ubuntu1.3fixed
Ubuntugolang-1.1822.041.18~beta1-0ubuntu1vulnerable
Ubuntugolang-1.1822.041.18~beta2-1ubuntu1vulnerable
Ubuntugolang-1.1822.041.18~beta2-1ubuntu2vulnerable
Ubuntugolang-1.1822.041.18~rc1-1ubuntu1vulnerable
Ubuntugolang-1.1822.041.18-1ubuntu1vulnerable
Ubuntugolang-1.1822.041.18.1-1ubuntu1vulnerable
Ubuntugolang-1.1822.041.18.1-1ubuntu1.1vulnerable
Ubuntugolang-1.1822.041.18.1-1ubuntu1.2fixed
Ubuntugolang-1.2022.041.20.3-1ubuntu0.1~22.04vulnerable
Ubuntugolang-1.2022.041.20.3-1ubuntu0.1~22.04.1vulnerable
Ubuntugolang-1.2122.041.21.1-1~ubuntu22.04.1vulnerable
Ubuntugolang-1.2122.041.21.1-1~ubuntu22.04.2vulnerable
Ubuntugolang-1.2122.041.21.1-1~ubuntu22.04.3vulnerable
Ubuntugolang-1.2122.041.21.1-1~ubuntu22.04.4vulnerable
Ubuntugolang-1.2222.041.22.2-2~22.04vulnerable
Ubuntugolang-1.2222.041.22.2-2~22.04.1vulnerable
Ubuntugolang-1.2222.041.22.2-2~22.04.2fixed
Ubuntugolang-1.2124.041.21.1-1vulnerable
Ubuntugolang-1.2124.041.21.3-1vulnerable
Ubuntugolang-1.2124.041.21.4-1vulnerable
Ubuntugolang-1.2124.041.21.5-1vulnerable
Ubuntugolang-1.2124.041.21.6-1vulnerable
Ubuntugolang-1.2124.041.21.7-1vulnerable
Ubuntugolang-1.2124.041.21.7-2vulnerable
Ubuntugolang-1.2124.041.21.8-1vulnerable
Ubuntugolang-1.2124.041.21.8-1build1vulnerable
Ubuntugolang-1.2124.041.21.9-1vulnerable
Ubuntugolang-1.2124.041.21.9-1ubuntu0.1vulnerable
Ubuntugolang-1.2224.041.22~rc1-2vulnerable
Ubuntugolang-1.2224.041.22.0-1vulnerable
Ubuntugolang-1.2224.041.22.0-2vulnerable
Ubuntugolang-1.2224.041.22.1-1vulnerable
Ubuntugolang-1.2224.041.22.1-1build1vulnerable
Ubuntugolang-1.2224.041.22.2-2vulnerable
Ubuntugolang-1.2224.041.22.2-2ubuntu0.1vulnerable
Ubuntugolang-1.2224.041.22.2-2ubuntu0.2vulnerable
Ubuntugolang-1.2224.041.22.2-2ubuntu0.3fixed
Ubuntugolang-1.2220.041.22.2-2~20.04.1vulnerable
Ubuntugolang-1.2220.041.22.2-2~20.04.2fixed
Ubuntugolang-1.2222.041.22.2-2~22.04vulnerable
Ubuntugolang-1.2222.041.22.2-2~22.04.1vulnerable
Ubuntugolang-1.2222.041.22.2-2~22.04.2fixed
Ubuntugolang-1.2224.041.22~rc1-2vulnerable
Ubuntugolang-1.2224.041.22.0-1vulnerable
Ubuntugolang-1.2224.041.22.0-2vulnerable
Ubuntugolang-1.2224.041.22.1-1vulnerable
Ubuntugolang-1.2224.041.22.1-1build1vulnerable
Ubuntugolang-1.2224.041.22.2-2vulnerable
Ubuntugolang-1.2224.041.22.2-2ubuntu0.1vulnerable
Ubuntugolang-1.2224.041.22.2-2ubuntu0.2vulnerable
Ubuntugolang-1.2224.041.22.2-2ubuntu0.3fixed
Opensuseforgejotumbleweed7.0.5-1.1fixed
Opensusego1.22tumbleweed1.22.5-1.1fixed
Susego1.22linux enterprise software development kit 12 sp51.22.5-1.15.1fixed
Susego1.22linux enterprise module for development tools 15 sp51.22.5-150000.1.21.1fixed
Susego1.22linux enterprise module for development tools 15 sp61.22.5-150000.1.21.1fixed
Opensusego1.22leap 15.51.22.5-150000.1.21.1fixed
Opensusego1.22leap 15.61.22.5-150000.1.21.1fixed
Opensuseistioctltumbleweed1.22.3-1.1fixed
Opensusego1.21tumbleweed1.21.12-1.1fixed
Susego1.21linux enterprise software development kit 12 sp51.21.12-1.39.1fixed
Susego1.21linux enterprise module for development tools 15 sp51.21.12-150000.1.39.1fixed
Susego1.21linux enterprise module for development tools 15 sp61.21.12-150000.1.39.1fixed
Susego1.21linux enterprise high performance computing 15 sp4-espos1.21.12-150000.1.39.1fixed
Susego1.21linux enterprise high performance computing 15 sp4-ltss1.21.12-150000.1.39.1fixed
Susego1.21linux enterprise server 15 sp4-ltss1.21.12-150000.1.39.1fixed
Susego1.21linux enterprise server for sap applications 15 sp41.21.12-150000.1.39.1fixed
Opensusego1.21leap 15.51.21.12-150000.1.39.1fixed
Opensusego1.21leap 15.61.21.12-150000.1.39.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiangolang-1.19sourcebookworm(unfixed)not yet assignedNot reportedNot reported
Ubuntugolang-1.22debnoble1.22.2-2ubuntu0.3Not reportedNot reportedNot reported
Ubuntugolang-1.22-docdebnoble1.22.2-2ubuntu0.3Not reportedNot reportedNot reported
Ubuntugolang-1.22-godebnoble1.22.2-2ubuntu0.3Not reportedNot reportedNot reported
Ubuntugolang-1.22-srcdebnoble1.22.2-2ubuntu0.3Not reportedNot reportedNot reported
Ubuntugolang-1.18debpro1.18.1-1ubuntu1~18.04.4+esm1Not reportedUBUNTU-CVE-2024-24791Not reported
Ubuntugolang-1.18deb20.041.18.1-1ubuntu1~20.04.3Not reportedUBUNTU-CVE-2024-24791Not reported
Ubuntugolang-1.22deb20.041.22.2-2~20.04.2Not reportedUBUNTU-CVE-2024-24791Not reported
Ubuntugolang-1.17deb22.041.17.13-3ubuntu1.3Not reportedUBUNTU-CVE-2024-24791Not reported
Ubuntugolang-1.18deb22.041.18.1-1ubuntu1.2Not reportedUBUNTU-CVE-2024-24791Not reported
Ubuntugolang-1.22deb22.041.22.2-2~22.04.2Not reportedUBUNTU-CVE-2024-24791Not reported
Ubuntugolang-1.22deb24.041.22.2-2ubuntu0.3Not reportedUBUNTU-CVE-2024-24791Not reported
Ubuntugolang-1.22deb20.041.22.2-2~20.04.2Not reportedUSN-7081-1Not reported
Ubuntugolang-1.22deb22.041.22.2-2~22.04.2Not reportedUSN-7081-1Not reported
Ubuntugolang-1.22deb24.041.22.2-2ubuntu0.3Not reportedUSN-7081-1Not reported
Opensuseforgejorpmtumbleweed7.0.5-1.1Not reportedOPENSUSE-SU-2024:14107-1Not reported
Opensusego1.22rpmtumbleweed1.22.5-1.1Not reportedOPENSUSE-SU-2024:14098-1Not reported
Susego1.22rpmlinux enterprise software development kit 12 sp51.22.5-1.15.1Not reportedSUSE-SU-2024:2295-1Not reported
Susego1.22rpmlinux enterprise module for development tools 15 sp51.22.5-150000.1.21.1Not reportedSUSE-SU-2024:2309-1Not reported
Susego1.22rpmlinux enterprise module for development tools 15 sp61.22.5-150000.1.21.1Not reportedSUSE-SU-2024:2309-1Not reported
Opensusego1.22rpmleap 15.51.22.5-150000.1.21.1Not reportedSUSE-SU-2024:2309-1Not reported
Opensusego1.22rpmleap 15.61.22.5-150000.1.21.1Not reportedSUSE-SU-2024:2309-1Not reported
Opensuseistioctlrpmtumbleweed1.22.3-1.1Not reportedOPENSUSE-SU-2024:14198-1Not reported
Opensusego1.21rpmtumbleweed1.21.12-1.1Not reportedOPENSUSE-SU-2024:14091-1Not reported
Susego1.21rpmlinux enterprise software development kit 12 sp51.21.12-1.39.1Not reportedSUSE-SU-2024:2294-1Not reported
Susego1.21rpmlinux enterprise module for development tools 15 sp51.21.12-150000.1.39.1Not reportedSUSE-SU-2024:2308-1Not reported
Susego1.21rpmlinux enterprise module for development tools 15 sp61.21.12-150000.1.39.1Not reportedSUSE-SU-2024:2308-1Not reported
Susego1.21rpmlinux enterprise high performance computing 15 sp4-espos1.21.12-150000.1.39.1Not reportedSUSE-SU-2024:2308-1Not reported
Susego1.21rpmlinux enterprise high performance computing 15 sp4-ltss1.21.12-150000.1.39.1Not reportedSUSE-SU-2024:2308-1Not reported
Susego1.21rpmlinux enterprise server 15 sp4-ltss1.21.12-150000.1.39.1Not reportedSUSE-SU-2024:2308-1Not reported
Susego1.21rpmlinux enterprise server for sap applications 15 sp41.21.12-150000.1.39.1Not reportedSUSE-SU-2024:2308-1Not reported
Opensusego1.21rpmleap 15.51.21.12-150000.1.39.1Not reportedSUSE-SU-2024:2308-1Not reported
Opensusego1.21rpmleap 15.61.21.12-150000.1.39.1Not reportedSUSE-SU-2024:2308-1Not reported

Notes

[bookworm] golang-1.19: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [golang-1.19]Affected
    Details (2)
    • 1.19.8-2 · all · bookworm

      Affected

      usn · golang-1.19 · debian · bookworm; usn · golang-1.19 · debian · 12

    • 1.19.8-2 · all · bookworm

      Affected

      usn · golang-1.19 · debian · bookworm; usn · golang-1.19 · debian · 12

  • [golang-1.19-doc]Affected

    Source package: [golang-1.19]

    Details (2)
    • 1.19.8-2 · all · bookworm

      Affected

      usn · golang-1.19 · debian · bookworm; usn · golang-1.19 · debian · 12

    • 1.19.8-2 · all · bookworm

      Affected

      usn · golang-1.19 · debian · bookworm; usn · golang-1.19 · debian · 12

  • [golang-1.19-go]Affected

    Source package: [golang-1.19]

    Details (2)
    • 1.19.8-2 · amd64 · bookworm

      Affected

      usn · golang-1.19 · debian · bookworm; usn · golang-1.19 · debian · 12

    • 1.19.8-2 · arm64 · bookworm

      Affected

      usn · golang-1.19 · debian · bookworm; usn · golang-1.19 · debian · 12

  • [golang-1.19-src]Affected

    Source package: [golang-1.19]

    Details (2)
    • 1.19.8-2 · all · bookworm

      Affected

      usn · golang-1.19 · debian · bookworm; usn · golang-1.19 · debian · 12

    • 1.19.8-2 · all · bookworm

      Affected

      usn · golang-1.19 · debian · bookworm; usn · golang-1.19 · debian · 12

[openSUSE Tumbleweed]

  • Source package: [forgejo]

    Details (1)
    • 16.0.3-1.1 · noarch · tumbleweed

      Unknown · Fixed: 7.0.5-1.1

      Version impact unknown

      usn · forgejo · opensuse · tumbleweed

  • Source package: [forgejo]

    Details (1)
    • 16.0.3-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 7.0.5-1.1

      Version impact unknown

      usn · forgejo · opensuse · tumbleweed

  • Source package: [forgejo]

    Details (1)
    • 16.0.3-1.1 · noarch · tumbleweed

      Unknown · Fixed: 7.0.5-1.1

      Version impact unknown

      usn · forgejo · opensuse · tumbleweed

  • Source package: [forgejo]

    Details (1)
    • 16.0.3-1.1 · noarch · tumbleweed

      Unknown · Fixed: 7.0.5-1.1

      Version impact unknown

      usn · forgejo · opensuse · tumbleweed

  • [go1.21-doc]Unknown

    Source package: [go1.21]

    Details (1)
    • 1.21.13-11.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.21.12-1.1

      Version impact unknown

      usn · go1.21 · opensuse · tumbleweed

  • [go1.21-race]Unknown

    Source package: [go1.21]

    Details (1)
    • 1.21.13-11.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.21.12-1.1

      Version impact unknown

      usn · go1.21 · opensuse · tumbleweed

  • [go1.22-doc]Unknown

    Source package: [go1.22]

    Details (1)
    • 1.22.12-7.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.22.5-1.1

      Version impact unknown

      usn · go1.22 · opensuse · tumbleweed

  • [go1.22-race]Unknown

    Source package: [go1.22]

    Details (1)
    • 1.22.12-7.2 · x86_64 · tumbleweed

      Unknown · Fixed: 1.22.5-1.1

      Version impact unknown

      usn · go1.22 · opensuse · tumbleweed

  • Source package: [istioctl]

    Details (1)
    • 1.30.4-1.1 · noarch · tumbleweed

      Unknown · Fixed: 1.22.3-1.1

      Version impact unknown

      usn · istioctl · opensuse · tumbleweed

  • Source package: [istioctl]

    Details (1)
    • 1.30.4-1.1 · noarch · tumbleweed

      Unknown · Fixed: 1.22.3-1.1

      Version impact unknown

      usn · istioctl · opensuse · tumbleweed

  • [forgejo]Fixed

    Source package: [forgejo]

    Details (1)
    • 16.0.3-1.1 · x86_64 · tumbleweed

      Fixed · Fixed: 7.0.5-1.1

      usn · forgejo · opensuse · tumbleweed

  • [go1.21]Fixed

    Source package: [go1.21]

    Details (1)
    • 1.21.13-11.2 · x86_64 · tumbleweed

      Fixed · Fixed: 1.21.12-1.1

      usn · go1.21 · opensuse · tumbleweed

  • [go1.22]Fixed

    Source package: [go1.22]

    Details (1)
    • 1.22.12-7.2 · x86_64 · tumbleweed

      Fixed · Fixed: 1.22.5-1.1

      usn · go1.22 · opensuse · tumbleweed

  • [istioctl]Fixed

    Source package: [istioctl]

    Details (1)
    • 1.30.4-1.1 · x86_64 · tumbleweed

      Fixed · Fixed: 1.22.3-1.1

      usn · istioctl · opensuse · tumbleweed

Observed:

References