CVE:CVE-2015-5739
CNNVD:CNNVD-201508-076
Google Golang Go是美国谷歌（Google）公司的一种针对多处理器系统应用程序的编程进行了优化的编程语言。
Google Golang Go中的net/textproto/reader.go文件的net/http库存在安全漏洞，该漏洞源于程序没有正确的解析HTTP包头密钥。远程攻击者可利用该漏洞向服务器响应中注入HTTP头，绕过安全控制，实施缓存中毒攻击，修改请求或响应页面。
solution:Upgrade golang go to a higher version than 1.4.2,and avoid the version (,1.4.2]; Upgrade fedoraproject fedora to a higher version than 21,22,and avoid the version 21,22; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.2,7.3,7.4,7.6,and avoid the version 7.2,7.3,7.4,7.6; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.2,7.3,7.4,7.5,7.6,and avoid the version 7.2,7.3,7.4,7.5,7.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.2,7.3,7.6,and avoid the version 7.2,7.3,7.6