Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade delve | May 4, 2022 | Aug 8, 2021 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 8, 2021 |
| Amazon Linux Ami 2 | — | Upgrade golang-miscUpgrade golang-docsUpgrade golangUpgrade golang-testsUpgrade golang-binUpgrade golang-raceUpgrade golang-srcUpgrade golang-shared | Sep 30, 2022 | Aug 8, 2021 |
| Amazon_linux | — | Upgrade golang | Oct 5, 2021 | Aug 8, 2021 |
| Centos_linux | — | Upgrade golang-docsUpgrade crun-debugsourceUpgrade golangUpgrade golang-miscUpgrade netavarkUpgrade buildah-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade runc-debuginfoUpgrade toolbox-debuginfoUpgrade podman-debuginfoUpgrade toolbox-debugsourceUpgrade libslirp-debugsourceUpgrade golang-srcUpgrade golang-testsUpgrade podman-debugsourceUpgrade toolboxUpgrade slirp4netns-debuginfoUpgrade criu-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-pluginsUpgrade delve-debugsourceUpgrade podmanUpgrade podman-catatonitUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade skopeoUpgrade podman-catatonit-debuginfoUpgrade golang-binUpgrade buildah-tests-debuginfoUpgrade podman-remoteUpgrade runcUpgrade skopeo-testsUpgrade criu-libs-debuginfoUpgrade criu-libsUpgrade delveUpgrade criu-develUpgrade delve-debuginfoUpgrade podman-remote-debuginfoUpgrade slirp4netns-debugsourceUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade containers-commonUpgrade critUpgrade podman-pluginsUpgrade skopeo-debugsourceUpgrade crunUpgrade criuUpgrade cockpit-podmanUpgrade buildahUpgrade aardvark-dnsUpgrade toolbox-testsUpgrade podman-testsUpgrade criu-debuginfoUpgrade udicaUpgrade buildah-debuginfoUpgrade python3-podmanUpgrade golang-raceUpgrade slirp4netnsUpgrade conmon-debugsourceUpgrade python3-criuUpgrade skopeo-debuginfoUpgrade go-toolsetUpgrade runc-debugsourceUpgrade crun-debuginfoUpgrade conmonUpgrade podman-gvproxyUpgrade containernetworking-plugins-debugsourceUpgrade podman-plugins-debuginfoUpgrade container-selinuxUpgrade buildah-testsUpgrade conmon-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirpUpgrade fuse-overlayfsUpgrade podman-docker | Nov 10, 2021 | Aug 8, 2021 |
| Debian | — | Upgrade golang-1.15 | Jan 24, 2022 | Aug 8, 2021 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Aug 5, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 8, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Feb 28, 2022 | Aug 8, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Jan 4, 2022 | Aug 8, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-binUpgrade golang-srcUpgrade golang | Dec 28, 2021 | Aug 8, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Jan 28, 2022 | Aug 8, 2021 |
| Oracle_linux | — | Upgrade conmonUpgrade libslirp-develUpgrade python3-podmanUpgrade skopeo-testsUpgrade podman-gvproxyUpgrade podman-dockerUpgrade cockpit-podmanUpgrade libslirpUpgrade buildah-testsUpgrade criu-develUpgrade criu-libsUpgrade podman-testsUpgrade slirp4netnsUpgrade container-selinuxUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade buildahUpgrade crunUpgrade runcUpgrade python3-criuUpgrade podmanUpgrade critUpgrade containers-commonUpgrade aardvark-dnsUpgrade podman-catatonitUpgrade udicaUpgrade podman-remoteUpgrade criuUpgrade skopeoUpgrade podman-pluginsUpgrade fuse-overlayfsUpgrade containernetworking-plugins | Nov 16, 2022 | Aug 5, 2021 |
| Redhat Openshift | — | Upgrade ignitionUpgrade cri-toolsUpgrade openshiftUpgrade openshift-clientsUpgrade windows-machine-config-rhel8-operatorUpgrade cri-o | Feb 24, 2022 | Aug 5, 2021 |
| Redhat_linux | — | Upgrade golangUpgrade crun-debuginfoUpgrade containers-commonUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade python3-podmanUpgrade criu-libsUpgrade conmonUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade delve-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade runc-debuginfoUpgrade runc-debugsourceUpgrade crun-debugsourceUpgrade libslirp-develUpgrade aardvark-dnsUpgrade golang-raceUpgrade conmon-debugsourceUpgrade buildah-tests-debuginfoUpgrade buildahUpgrade golang-srcUpgrade go-toolsetUpgrade netavarkUpgrade conmon-debuginfoUpgrade fuse-overlayfsUpgrade golang-miscUpgrade criu-debugsourceUpgrade criu-debuginfoUpgrade toolboxUpgrade buildah-debuginfoUpgrade podman-remote-debuginfoUpgrade libslirpUpgrade podman-debuginfoNo solution existsUpgrade container-selinuxUpgrade slirp4netns-debuginfoUpgrade criu-libs-debuginfoUpgrade toolbox-debugsourceUpgrade crunUpgrade podman-gvproxy-debuginfoUpgrade toolbox-debuginfoUpgrade skopeo-debugsourceUpgrade critUpgrade runcUpgrade podman-catatonit-debuginfoUpgrade buildah-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade delve-debugsourceUpgrade delveUpgrade podman-plugins-debuginfoUpgrade podman-catatonitUpgrade podman-debugsourceUpgrade podman-pluginsUpgrade podmanUpgrade libslirp-debuginfoUpgrade buildah-testsUpgrade podman-testsUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade slirp4netns-debugsourceUpgrade podman-dockerUpgrade skopeo-debuginfoUpgrade criu-develUpgrade slirp4netnsUpgrade toolbox-testsUpgrade containernetworking-pluginsUpgrade golang-binUpgrade criuUpgrade skopeoUpgrade python3-criuUpgrade udicaUpgrade cockpit-podmanUpgrade golang-testsUpgrade golang-docsUpgrade skopeo-testsUpgrade podman-gvproxyUpgrade podman-remoteUpgrade libslirp-debugsource | Nov 10, 2021 | Aug 8, 2021 |
| Rocky_linux | — | Upgrade runc-debuginfoUpgrade toolbox-debugsourceUpgrade conmonUpgrade criu-libs-debuginfoUpgrade slirp4netns-debugsourceUpgrade slirp4netns-debuginfoUpgrade toolboxUpgrade golang-raceUpgrade libslirp-develUpgrade critUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade criu-develUpgrade toolbox-debuginfoUpgrade delveUpgrade slirp4netnsUpgrade libslirpUpgrade libslirp-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade python3-criuUpgrade runcUpgrade delve-debugsourceUpgrade crunUpgrade containernetworking-plugins-debugsourceUpgrade toolbox-testsUpgrade fuse-overlayfsUpgrade delve-debuginfoUpgrade criuUpgrade criu-debugsourceUpgrade crun-debuginfoUpgrade conmon-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-pluginsUpgrade golang-binUpgrade runc-debugsourceUpgrade crun-debugsourceUpgrade criu-debuginfoUpgrade criu-libsUpgrade libslirp-debuginfoUpgrade golangUpgrade oci-seccomp-bpf-hookUpgrade go-toolsetUpgrade conmon-debuginfo | Mar 12, 2024 | Aug 8, 2021 |
| Suse | — | Upgrade go1.15Upgrade go1.16-raceUpgrade go1.15-raceUpgrade go1.16-docUpgrade go1.16Upgrade go1.15-doc | Aug 21, 2021 | Aug 8, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 8, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub