Name: CVE-2021-36221: Concurrent Execution using Shared Resource with Improper Synchronization
Creator: Rapid7
Published: 2021-08-08T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2021-36221, CWE-362, CVSS 5.9, EPSS 0.03114

Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort.

CVSS Details

CVSS 3.1 Base Score: 5.9
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade delve	May 4, 2022	Aug 8, 2021
Alpine Linux	—	Upgrade go	Aug 22, 2024	Aug 8, 2021
Amazon Linux Ami 2	—	Upgrade golang-miscUpgrade golang-testsUpgrade golang-docsUpgrade golangUpgrade golang-binUpgrade golang-srcUpgrade golang-raceUpgrade golang-shared	Sep 30, 2022	Aug 8, 2021
Amazon_linux	—	Upgrade golang	Oct 5, 2021	Aug 8, 2021
Centos_linux	—	Upgrade containers-commonUpgrade podmanUpgrade libslirp-develUpgrade criu-develUpgrade podman-remoteUpgrade golang-binUpgrade podman-remote-debuginfoUpgrade criu-libsUpgrade skopeoUpgrade delve-debuginfoUpgrade podman-pluginsUpgrade slirp4netns-debugsourceUpgrade skopeo-testsUpgrade containernetworking-plugins-debuginfoUpgrade libslirp-debuginfoUpgrade delveUpgrade podman-catatonitUpgrade criu-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade runcUpgrade critUpgrade buildah-tests-debuginfoUpgrade containernetworking-pluginsUpgrade libslirp-debugsourceUpgrade buildah-debugsourceUpgrade crun-debugsourceUpgrade runc-debuginfoUpgrade criu-libs-debuginfoUpgrade golangUpgrade golang-miscUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-testsUpgrade toolboxUpgrade golang-srcUpgrade golang-docsUpgrade delve-debugsourceUpgrade podman-debugsourceUpgrade slirp4netns-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade toolbox-debuginfoUpgrade netavarkUpgrade fuse-overlayfs-debugsourceUpgrade podman-debuginfoUpgrade toolbox-debugsourceUpgrade podman-dockerUpgrade slirp4netnsUpgrade crunUpgrade runc-debugsourceUpgrade buildah-testsUpgrade skopeo-debugsourceUpgrade toolbox-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade python3-podmanUpgrade golang-raceUpgrade buildah-debuginfoUpgrade criu-debuginfoUpgrade libslirpUpgrade fuse-overlayfsUpgrade conmon-debuginfoUpgrade container-selinuxUpgrade python3-criuUpgrade go-toolsetUpgrade crun-debuginfoUpgrade skopeo-debuginfoUpgrade podman-plugins-debuginfoUpgrade udicaUpgrade podman-testsUpgrade criuUpgrade cockpit-podmanUpgrade buildahUpgrade aardvark-dnsUpgrade conmonUpgrade podman-gvproxyUpgrade containernetworking-plugins-debugsourceUpgrade conmon-debugsource	Nov 10, 2021	Aug 8, 2021
Debian	—	Upgrade golang-1.15	Jan 24, 2022	Aug 8, 2021
Freebsd	—	Upgrade go	Nov 4, 2022	Aug 5, 2021
Gentoo Linux	—	Upgrade dev-lang/go.	Aug 5, 2022	Aug 8, 2021
Huawei Euleros 2_0_sp10	—	Upgrade golangUpgrade golang-helpUpgrade golang-devel	Feb 28, 2022	Aug 8, 2021
Huawei Euleros 2_0_sp5	—	Upgrade golangUpgrade golang-srcUpgrade golang-bin	Jan 4, 2022	Aug 8, 2021
Huawei Euleros 2_0_sp8	—	Upgrade golangUpgrade golang-srcUpgrade golang-bin	Dec 28, 2021	Aug 8, 2021
Huawei Euleros 2_0_sp9	—	Upgrade golang-develUpgrade golangUpgrade golang-help	Jan 28, 2022	Aug 8, 2021
Oracle_linux	—	Upgrade buildah-testsUpgrade conmonUpgrade libslirp-develUpgrade podman-dockerUpgrade libslirpUpgrade netavarkUpgrade criu-libsUpgrade podman-gvproxyUpgrade cockpit-podmanUpgrade skopeo-testsUpgrade container-selinuxUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hookUpgrade podman-testsUpgrade criu-develUpgrade crunUpgrade python3-podmanUpgrade buildahUpgrade containernetworking-pluginsUpgrade runcUpgrade podman-pluginsUpgrade skopeoUpgrade criuUpgrade critUpgrade podman-catatonitUpgrade podmanUpgrade python3-criuUpgrade containers-commonUpgrade aardvark-dnsUpgrade fuse-overlayfsUpgrade udicaUpgrade podman-remote	Nov 16, 2022	Aug 5, 2021
Redhat Openshift	—	Upgrade cri-oUpgrade windows-machine-config-rhel8-operatorUpgrade openshiftUpgrade ignitionUpgrade cri-toolsUpgrade openshift-clients	Feb 24, 2022	Aug 5, 2021
Redhat_linux	—	Upgrade libslirp-develUpgrade crun-debugsourceUpgrade golangUpgrade criu-libsUpgrade golang-raceUpgrade podman-remote-debuginfoUpgrade crun-debuginfoUpgrade buildah-tests-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade conmon-debugsourceUpgrade delve-debuginfoUpgrade golang-srcUpgrade criu-debuginfoUpgrade netavarkUpgrade go-toolsetUpgrade containers-commonUpgrade buildahUpgrade conmon-debuginfoUpgrade runc-debuginfoUpgrade aardvark-dnsUpgrade runc-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade toolboxUpgrade fuse-overlayfs-debugsourceUpgrade criu-debugsourceUpgrade golang-miscUpgrade conmonUpgrade fuse-overlayfsUpgrade buildah-debuginfoUpgrade libslirpUpgrade python3-podmanUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade cockpit-podmanUpgrade skopeo-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade golang-testsUpgrade criu-develUpgrade golang-docsUpgrade criu-libs-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-catatonitUpgrade runcUpgrade containernetworking-plugins-debugsourceUpgrade buildah-testsUpgrade critUpgrade skopeo-debuginfoUpgrade podmanUpgrade slirp4netnsUpgrade podman-dockerUpgrade toolbox-testsUpgrade skopeoUpgrade containernetworking-pluginsUpgrade golang-binUpgrade container-selinuxUpgrade podman-debugsourceUpgrade criuUpgrade crunUpgrade delveUpgrade delve-debugsourceUpgrade buildah-debugsourceUpgrade podman-catatonit-debuginfoUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-debuginfoUpgrade toolbox-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-remoteUpgrade libslirp-debuginfoUpgrade libslirp-debugsourceUpgrade toolbox-debugsourceUpgrade podman-testsUpgrade containernetworking-plugins-debuginfoNo solution existsUpgrade podman-gvproxyUpgrade skopeo-testsUpgrade udicaUpgrade python3-criu	Nov 10, 2021	Aug 8, 2021
Rocky_linux	—	Upgrade oci-seccomp-bpf-hookUpgrade criu-debugsourceUpgrade containernetworking-pluginsUpgrade go-toolsetUpgrade golangUpgrade criu-debuginfoUpgrade libslirp-debuginfoUpgrade toolbox-testsUpgrade fuse-overlayfs-debugsourceUpgrade criu-libsUpgrade conmon-debugsourceUpgrade criuUpgrade crun-debuginfoUpgrade delve-debuginfoUpgrade golang-binUpgrade runc-debugsourceUpgrade conmon-debuginfoUpgrade fuse-overlayfsUpgrade crun-debugsourceUpgrade criu-develUpgrade libslirp-develUpgrade toolbox-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netnsUpgrade runcUpgrade delve-debugsourceUpgrade golang-raceUpgrade delveUpgrade critUpgrade containernetworking-plugins-debugsourceUpgrade toolbox-debuginfoUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade crunUpgrade slirp4netns-debugsourceUpgrade criu-libs-debuginfoUpgrade conmonUpgrade toolboxUpgrade slirp4netns-debuginfoUpgrade python3-criuUpgrade libslirp-debugsourceUpgrade libslirpUpgrade fuse-overlayfs-debuginfoUpgrade oci-seccomp-bpf-hook-debugsource	Mar 12, 2024	Aug 8, 2021
Suse	—	Upgrade go1.15Upgrade go1.15-raceUpgrade go1.16-docUpgrade go1.15-docUpgrade go1.16Upgrade go1.16-race	Aug 21, 2021	Aug 8, 2021
Vmware Photon_os	—	Use 'tdnf update' to upgrade all packages to the latest version.	Jan 20, 2025	Aug 8, 2021

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence