AZL-98904 CVE-2016-5386 affecting package golang 1.27.1-1

🗓️ 19 Jul 2016 02:00:18Reported by GoogleType

osv🔗 osv.dev👁 3 Views

Go through 1.6 net/http lets attackers redirect CGI traffic via HTTP_PROXY header (httpoxy).

Reporter	Title	Published	Views	Family All 76
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat affect the IBM FlashSystem models 840 and 900	18 Feb 202301:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat affect the IBM FlashSystem model V840	18 Jun 201800:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Concert Software is vulnerable to multiple issues	22 Aug 202417:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Apache Tomcat affect SAN Volume Controller, Storwize family and FlashSystem V9000 products	29 Mar 202301:48	–	ibm
ATTACKERKB	CVE-2016-1000101	6 Oct 201614:59	–	attackerkb
Amazon	Medium: golang	17 Aug 201600:00	–	amazon
Tenable Nessus	Amazon Linux AMI : golang (ALAS-2016-731) (httpoxy)	18 Aug 201600:00	–	nessus
Tenable Nessus	CentOS 7 : golang (CESA-2016:1538) (httpoxy)	3 Aug 201600:00	–	nessus
Tenable Nessus	Fedora 23 : golang (2016-340e361b90) (httpoxy)	29 Jul 201600:00	–	nessus
Tenable Nessus	Fedora 24 : golang (2016-ea5e284d34) (httpoxy)	29 Jul 201600:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-5386

16 Sep 2026 06:39Current

CVSS 3.18.1

EPSS0.0522

Go net/http HTTP_PROXY httpoxy CGI traffic redirection environment variable