CVE:CVE-2016-5386
CNNVD:CNNVD-201607-539
Google Go是美国谷歌（Google）公司的一种针对多处理器系统应用程序的编程进行了优化的编程语言。
Google Go 1.6及之前的版本中的net/http数据包存在安全漏洞，该漏洞源于程序没有解决RFC 3875模式下的命名空间冲突。程序没有正确处理来自HTTP_PROXY环境变量中不可信客户端数据应用程序。远程攻击者借助HTTP请求中特制的Proxy header消息利用该漏洞实施中间人攻击，指引服务器发送连接到任意主机。
solution:Upgrade fedoraproject fedora to a higher version than 23,24,and avoid the version 23,24; Upgrade oracle linux to a higher version than 7,and avoid the version 7; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.2,and avoid the version 7.2; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.2,and avoid the version 7.2; Upgrade golang go to a higher version than 1.6.3,1.7:rc1,and avoid the version [1.0,1.6.3),1.7:rc1