Improper Hostname Validation

🗓️ 18 Mar 2025 02:44:30Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 9 Views

Vulnerability in golang.org/x/net allows bypassing proxy restrictions via improper hostname validation.

Reporter	Title	Published	Views	Family All 1531
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in Go affects IBM Robotic Process Automation for Cloud Pak	6 Aug 202513:40	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion	11 Sep 202518:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Edge Application Manager	20 Aug 202502:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Log Management AQL Plugin includes components with known vulnerabilities	20 Oct 202520:06	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability affects IBM watsonx Orchestrate with watsonx Assistant Cartridge	7 Aug 202503:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in golang.org/x/net affect IBM® Db2® Big SQL on IBM Cloud Pak for Data.	23 Jan 202613:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar EDR Software contains multiple vulnerabilities	20 May 202521:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to loss of confidentiality	1 Sep 202511:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	21 Jan 202605:14	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Aspera HTTP Gateway	26 Sep 202514:23	–	ibm

Vulners

Node

golang goMatch1.23.3-r0go

AND

golang goMatch1.23.6-r0go

AND

golang goMatch1.23.5-r0go

AND

golang goMatch1.23.4-r0go

AND

alpinelinux alpine_linuxMatch3.21

golang goMatch1.21.5-r0go

AND

golang goMatch1.20.2-r0go

AND

golang goMatch1.21.0-r0go

AND

golang goMatch1.13.10-r0go

AND

golang goMatch1.21.0-r1go

AND

golang goMatch1.20.2-r1go

AND

golang goMatch1.17.6-r0go

AND

golang goMatch1.23.5-r0go

AND

golang goMatch1.21.2-r0go

AND

golang goMatch1.18.3-r1go

AND

golang goMatch1.23.1-r0go

AND

golang goMatch1.22.3-r0go

AND

golang goMatch1.16.7-r0go

AND

golang goMatch1.17.7-r0go

AND

golang goMatch1.22.1-r1go

AND

golang goMatch1.20.5-r2go

AND

golang goMatch1.22.6-r0go

AND

golang goMatch1.18.4-r2go

AND

golang goMatch1.16-r0go

AND

golang goMatch1.18-r0go

AND

golang goMatch1.19.5-r0go

AND

golang goMatch1.21.4-r0go

AND

golang goMatch1.21.6-r0go

AND

golang goMatch1.20-r0go

AND

golang goMatch1.17.1-r0go

AND

golang goMatch1.23.3-r0go

AND

golang goMatch1.20.3-r0go

AND

golang goMatch1.16.3-r0go

AND

golang goMatch1.16.4-r0go

AND

golang goMatch1.22.0-r1go

AND

golang goMatch1.23.2-r0go

AND

golang goMatch1.17.2-r0go

AND

golang goMatch1.21.3-r1go

AND

golang goMatch1.14.3-r0go

AND

golang goMatch1.20.4-r0go

AND

golang goMatch1.22.1-r2go

AND

golang goMatch1.20.6-r0go

AND

golang goMatch1.19.1-r1go

AND

golang goMatch1.20.1-r0go

AND

golang goMatch1.24.0-r0go

AND

golang goMatch1.16.5-r0go

AND

golang goMatch1.23.6-r0go

AND

golang goMatch1.17.4-r0go

AND

golang goMatch1.22.1-r0go

AND

golang goMatch1.21.1-r0go

AND

golang goMatch1.19-r0go

AND

golang goMatch1.18-r1go

AND

golang goMatch1.22.2-r0go

AND

golang goMatch1.13.8-r0go

AND

golang goMatch1.22.4-r1go

AND

golang goMatch1.18.3-r0go

AND

golang goMatch1.19.3-r0go

AND

golang goMatch1.22.5-r0go

AND

golang goMatch1.18.5-r0go

AND

golang goMatch1.18.1-r1go

AND

golang goMatch1.19.2-r0go

AND

golang goMatch1.22.0-r0go

AND

golang goMatch1.20.7-r0go

AND

golang goMatch1.19.4-r0go

AND

golang goMatch1.17.8-r0go

AND

golang goMatch1.16.2-r0go

AND

golang goMatch1.17.3-r0go

AND

golang goMatch1.18.2-r0go

AND

golang goMatch1.23.4-r0go

AND

golang goMatch1.19.1-r0go

AND

alpinelinux alpine_linuxMatchedge

rclone rcloneMatch1.53.3-r2go

AND

rclone rcloneMatch1.63.1-r0go

AND

rclone rcloneMatch1.69.1-r1go

AND

rclone rcloneMatch1.68.0-r0go

AND

rclone rcloneMatch1.59.0-r2go

AND

rclone rcloneMatch1.56.2-r0go

AND

rclone rcloneMatch1.60.1-r0go

AND

rclone rcloneMatch1.57.0-r2go

AND

rclone rcloneMatch1.67.0-r0go

AND

rclone rcloneMatch1.58.0-r2go

AND

rclone rcloneMatch1.53.3-r1go

AND

rclone rcloneMatch1.67.0-r1go

AND

rclone rcloneMatch1.63.0-r1go

AND

rclone rcloneMatch1.61.1-r2go

AND

rclone rcloneMatch1.64.2-r0go

AND

rclone rcloneMatch1.60.1-r1go

AND

rclone rcloneMatch1.66.0-r1go

AND

rclone rcloneMatch1.51.0-r0go

AND

rclone rcloneMatch1.69.0-r2go

AND

rclone rcloneMatch1.65.2-r1go

AND

rclone rcloneMatch1.60.0-r1go

AND

rclone rcloneMatch1.63.0-r0go

AND

rclone rcloneMatch1.68.1-r0go

AND

rclone rcloneMatch1.59.1-r1go

AND

rclone rcloneMatch1.65.0-r0go

AND

rclone rcloneMatch1.58.0-r1go

AND

rclone rcloneMatch1.59.1-r0go

AND

rclone rcloneMatch1.69.0-r0go

AND

rclone rcloneMatch1.62.2-r0go

AND

rclone rcloneMatch1.62.2-r1go

AND

rclone rcloneMatch1.65.2-r0go

AND

rclone rcloneMatch1.66.0-r3go

AND

rclone rcloneMatch1.61.1-r1go

AND

rclone rcloneMatch1.63.1-r1go

AND

rclone rcloneMatch1.63.1-r2go

AND

rclone rcloneMatch1.53.3-r4go

AND

rclone rcloneMatch1.58.1-r0go

AND

rclone rcloneMatch1.59.2-r2go

AND

rclone rcloneMatch1.59.0-r0go

AND

rclone rcloneMatch1.59.2-r0go

AND

rclone rcloneMatch1.60.0-r0go

AND

rclone rcloneMatch1.62.2-r2go

AND

rclone rcloneMatch1.69.1-r0go

AND

rclone rcloneMatch1.68.2-r0go

AND

rclone rcloneMatch1.57.0-r3go

AND

rclone rcloneMatch1.66.0-r2go

AND

rclone rcloneMatch1.63.1-r3go

AND

rclone rcloneMatch1.61.1-r0go

AND

rclone rcloneMatch1.58.1-r1go

AND

rclone rcloneMatch1.58.0-r3go

AND

rclone rcloneMatch1.66.0-r0go

AND

rclone rcloneMatch1.59.0-r1go

AND

rclone rcloneMatch1.57.0-r1go

AND

rclone rcloneMatch1.51.0-r1go

AND

rclone rcloneMatch1.69.0-r1go

AND

alpinelinux alpine_linuxMatchedge

apple mac_os_xRangev0.1.0–0.1.0go

Source	Link
github	www.github.com/golang/go/issues/71984
pkg	www.pkg.go.dev/vuln/GO-2025-3503
go-review	www.go-review.googlesource.com/c/net/+/654697
github	www.github.com/advisories/GHSA-qxp5-gwg8-xv66
go	www.go.dev/cl/654697
go	www.go.dev/issue/71984
security	www.security.netapp.com/advisory/ntap-20250509-0007/
openwall	www.openwall.com/lists/oss-security/2025/03/07/2
openwall	www.openwall.com/lists/oss-security/2025/03/07/2

09 May 2025 22:19Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.14.4

EPSS0.00033

SSVC