UBUNTU-CVE-2025-22870
- Source
- https://ubuntu.com/security/CVE-2025-22870
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-22870.json
- JSON Data
- https://api.osv.dev/v1/vulns/UBUNTU-CVE-2025-22870
- Upstream
- Downstream
- Related
- Published
- 2025-03-12T19:15:00Z
- Modified
- 2025-07-14T06:36:14.874932Z
- Severity
-
- 4.4 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L CVSS Calculator
- - medium
- Summary
- [none]
- Details
-
Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.
- References
Affected packages
Ubuntu:Pro:14.04:LTS / golang-1.10
Package
- Name
- golang-1.10
- Purl
- pkg:deb/ubuntu/golang-1.10@1.10.4-2ubuntu1~14.04.1?arch=source&distro=esm-infra-legacy/trusty
Ubuntu:Pro:16.04:LTS / golang-1.10
Package
- Name
- golang-1.10
- Purl
- pkg:deb/ubuntu/golang-1.10@1.10.4-2ubuntu1~16.04.2?arch=source&distro=esm-infra/xenial
Ubuntu:Pro:16.04:LTS / golang-1.6
Package
- Name
- golang-1.6
- Purl
- pkg:deb/ubuntu/golang-1.6@1.6.2-0ubuntu5~16.04.4?arch=source&distro=esm-infra/xenial
Ubuntu:Pro:16.04:LTS / golang-1.13
Package
- Name
- golang-1.13
- Purl
- pkg:deb/ubuntu/golang-1.13@1.13.8-1ubuntu1~16.04.3+esm3?arch=source&distro=esm-apps/xenial
Ubuntu:Pro:16.04:LTS / golang-1.18
Package
- Name
- golang-1.18
- Purl
- pkg:deb/ubuntu/golang-1.18@1.18.1-1ubuntu1~16.04.6+esm1?arch=source&distro=esm-apps/xenial
Ubuntu:Pro:18.04:LTS / golang-1.10
Package
- Name
- golang-1.10
- Purl
- pkg:deb/ubuntu/golang-1.10@1.10.4-2ubuntu1~18.04.2?arch=source&distro=esm-infra/bionic
Ubuntu:Pro:18.04:LTS / golang-1.13
Package
- Name
- golang-1.13
- Purl
- pkg:deb/ubuntu/golang-1.13@1.13.8-1ubuntu1~18.04.4+esm1?arch=source&distro=esm-apps/bionic
Ubuntu:Pro:18.04:LTS / golang-1.16
Package
- Name
- golang-1.16
- Purl
- pkg:deb/ubuntu/golang-1.16@1.16.2-0ubuntu1~18.04.2+esm1?arch=source&distro=esm-apps/bionic
Ubuntu:Pro:18.04:LTS / golang-1.18
Package
- Name
- golang-1.18
- Purl
- pkg:deb/ubuntu/golang-1.18@1.18.1-1ubuntu1~18.04.4+esm1?arch=source&distro=esm-apps/bionic
Ubuntu:Pro:18.04:LTS / golang-1.8
Package
- Name
- golang-1.8
- Purl
- pkg:deb/ubuntu/golang-1.8@1.8.3-2ubuntu1.18.04.1?arch=source&distro=esm-apps/bionic
Ubuntu:Pro:18.04:LTS / golang-1.9
Package
- Name
- golang-1.9
- Purl
- pkg:deb/ubuntu/golang-1.9@1.9.4-1ubuntu1?arch=source&distro=esm-apps/bionic
Ubuntu:Pro:20.04:LTS / golang-1.13
Package
- Name
- golang-1.13
- Purl
- pkg:deb/ubuntu/golang-1.13@1.13.8-1ubuntu1.2?arch=source&distro=esm-infra/focal
Ubuntu:Pro:20.04:LTS / golang-1.14
Package
- Name
- golang-1.14
- Purl
- pkg:deb/ubuntu/golang-1.14@1.14.3-2ubuntu2~20.04.2?arch=source&distro=esm-infra/focal
Ubuntu:Pro:20.04:LTS / golang-1.16
Package
- Name
- golang-1.16
- Purl
- pkg:deb/ubuntu/golang-1.16@1.16.2-0ubuntu1~20.04.1+esm1?arch=source&distro=esm-apps/focal
Ubuntu:22.04:LTS / golang-1.13
Package
- Name
- golang-1.13
- Purl
- pkg:deb/ubuntu/golang-1.13@1.13.8-1ubuntu2.22.04.2?arch=source&distro=jammy
Ubuntu:22.04:LTS / golang-1.17
Package
- Name
- golang-1.17
- Purl
- pkg:deb/ubuntu/golang-1.17@1.17.13-3ubuntu1.3?arch=source&distro=jammy
Ubuntu:22.04:LTS / golang-1.18
Package
- Name
- golang-1.18
- Purl
- pkg:deb/ubuntu/golang-1.18@1.18.1-1ubuntu1.2?arch=source&distro=jammy
Ubuntu:22.04:LTS / golang-1.20
Package
- Name
- golang-1.20
- Purl
- pkg:deb/ubuntu/golang-1.20@1.20.3-1ubuntu0.1~22.04.1?arch=source&distro=jammy
Ubuntu:22.04:LTS / golang-1.21
Package
- Name
- golang-1.21
- Purl
- pkg:deb/ubuntu/golang-1.21@1.21.1-1~ubuntu22.04.3?arch=source&distro=jammy
Ubuntu:22.04:LTS / golang-1.22
Package
- Name
- golang-1.22
- Purl
- pkg:deb/ubuntu/golang-1.22@1.22.2-2~22.04.3?arch=source&distro=jammy
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.22.2-2~22.04.3
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "golang-1.22",
"binary_version": "1.22.2-2~22.04.3"
},
{
"binary_name": "golang-1.22-doc",
"binary_version": "1.22.2-2~22.04.3"
},
{
"binary_name": "golang-1.22-go",
"binary_version": "1.22.2-2~22.04.3"
},
{
"binary_name": "golang-1.22-src",
"binary_version": "1.22.2-2~22.04.3"
}
]
}
Ubuntu:22.04:LTS / golang-1.23
Package
- Name
- golang-1.23
- Purl
- pkg:deb/ubuntu/golang-1.23@1.23.1-1~22.04?arch=source&distro=jammy
Ubuntu:24.04:LTS / golang-1.21
Package
- Name
- golang-1.21
- Purl
- pkg:deb/ubuntu/golang-1.21@1.21.9-1ubuntu0.1?arch=source&distro=noble
Ubuntu:24.04:LTS / golang-1.22
Package
- Name
- golang-1.22
- Purl
- pkg:deb/ubuntu/golang-1.22@1.22.2-2ubuntu0.4?arch=source&distro=noble
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.22.2-2ubuntu0.4
Affected versions
1.*
1.22~rc1-2
1.22.0-1
1.22.0-2
1.22.1-1
1.22.1-1build1
1.22.2-2
1.22.2-2ubuntu0.1
1.22.2-2ubuntu0.2
1.22.2-2ubuntu0.3
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "golang-1.22",
"binary_version": "1.22.2-2ubuntu0.4"
},
{
"binary_name": "golang-1.22-doc",
"binary_version": "1.22.2-2ubuntu0.4"
},
{
"binary_name": "golang-1.22-go",
"binary_version": "1.22.2-2ubuntu0.4"
},
{
"binary_name": "golang-1.22-src",
"binary_version": "1.22.2-2ubuntu0.4"
}
]
}
Ubuntu:24.04:LTS / golang-1.23
Package
- Name
- golang-1.23
- Purl
- pkg:deb/ubuntu/golang-1.23@1.23.1-1~24.04?arch=source&distro=noble
Ubuntu:25.04 / golang-1.23
Package
- Name
- golang-1.23
- Purl
- pkg:deb/ubuntu/golang-1.23@1.23.8-1?arch=source&distro=plucky