Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade delve | May 4, 2022 | Aug 8, 2021 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 8, 2021 |
| Amazon Linux Ami 2 | — | Upgrade golangUpgrade golang-testsUpgrade golang-docsUpgrade golang-miscUpgrade golang-raceUpgrade golang-sharedUpgrade golang-binUpgrade golang-src | Sep 30, 2022 | Aug 8, 2021 |
| Amazon_linux | — | Upgrade golang | Oct 5, 2021 | Aug 8, 2021 |
| Centos_linux | — | Upgrade podman-debuginfoUpgrade toolbox-debuginfoUpgrade podman-remote-debuginfoUpgrade containers-commonUpgrade podman-gvproxy-debuginfoUpgrade critUpgrade netavarkUpgrade toolbox-debugsourceUpgrade criu-libsUpgrade criu-libs-debuginfoUpgrade criu-debugsourceUpgrade podman-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade slirp4netns-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade golang-docsUpgrade crun-debugsourceUpgrade runc-debuginfoUpgrade golangUpgrade golang-miscUpgrade podman-debugsourceUpgrade toolboxUpgrade containernetworking-pluginsUpgrade delve-debugsourceUpgrade slirp4netns-debuginfoUpgrade golang-testsUpgrade golang-srcUpgrade podman-catatonit-debuginfoUpgrade libslirp-debuginfoUpgrade libslirp-debugsourceUpgrade golang-binUpgrade podman-remoteUpgrade delve-debuginfoUpgrade runcUpgrade buildah-tests-debuginfoUpgrade criu-develUpgrade delveUpgrade skopeoUpgrade buildah-debugsourceUpgrade libslirp-develUpgrade podmanUpgrade skopeo-testsUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade python3-podmanUpgrade go-toolsetUpgrade aardvark-dnsUpgrade crun-debuginfoUpgrade buildah-debuginfoUpgrade golang-raceUpgrade buildahUpgrade slirp4netnsUpgrade container-selinuxUpgrade libslirpUpgrade conmon-debuginfoUpgrade fuse-overlayfsUpgrade udicaUpgrade criu-debuginfoUpgrade skopeo-debugsourceUpgrade podman-dockerUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildah-testsUpgrade python3-criuUpgrade skopeo-debuginfoUpgrade conmon-debugsourceUpgrade runc-debugsourceUpgrade crunUpgrade criuUpgrade cockpit-podmanUpgrade toolbox-testsUpgrade conmonUpgrade podman-gvproxyUpgrade containernetworking-plugins-debugsourceUpgrade podman-plugins-debuginfoUpgrade podman-tests | Nov 10, 2021 | Aug 8, 2021 |
| Debian | — | Upgrade golang-1.15 | Jan 24, 2022 | Aug 8, 2021 |
| Freebsd | — | Upgrade go | Nov 4, 2022 | Aug 5, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 8, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Feb 28, 2022 | Aug 8, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Jan 4, 2022 | Aug 8, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade golang-srcUpgrade golangUpgrade golang-bin | Dec 28, 2021 | Aug 8, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Jan 28, 2022 | Aug 8, 2021 |
| Oracle_linux | — | Upgrade fuse-overlayfsUpgrade aardvark-dnsUpgrade containernetworking-pluginsUpgrade critUpgrade podmanUpgrade python3-criuUpgrade runcUpgrade podman-catatonitUpgrade podman-remoteUpgrade containers-commonUpgrade udicaUpgrade podman-pluginsUpgrade skopeoUpgrade criuUpgrade container-selinuxUpgrade python3-podmanUpgrade podman-dockerUpgrade buildahUpgrade podman-testsUpgrade oci-seccomp-bpf-hookUpgrade crunUpgrade criu-develUpgrade buildah-testsUpgrade libslirp-develUpgrade conmonUpgrade skopeo-testsUpgrade cockpit-podmanUpgrade netavarkUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade libslirpUpgrade criu-libs | Nov 16, 2022 | Aug 5, 2021 |
| Redhat Openshift | — | Upgrade openshift-clientsUpgrade cri-toolsUpgrade ignitionUpgrade openshiftUpgrade windows-machine-config-rhel8-operatorUpgrade cri-o | Feb 24, 2022 | Aug 5, 2021 |
| Redhat_linux | — | Upgrade delveUpgrade podman-dockerUpgrade slirp4netnsUpgrade slirp4netns-debugsourceUpgrade skopeo-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade delve-debugsourceUpgrade golang-testsUpgrade toolbox-testsUpgrade python3-criuUpgrade golang-docsUpgrade containernetworking-plugins-debugsourceUpgrade criu-develUpgrade skopeo-testsUpgrade critUpgrade udicaUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-debugsourceUpgrade podman-plugins-debuginfoUpgrade criu-libs-debuginfoUpgrade podman-catatonitUpgrade toolbox-debuginfoUpgrade runcUpgrade podman-pluginsUpgrade containernetworking-plugins-debuginfoUpgrade podman-debuginfoUpgrade cockpit-podmanUpgrade podman-testsUpgrade libslirp-debuginfoUpgrade toolbox-debugsourceUpgrade skopeo-debugsourceNo solution existsUpgrade podman-gvproxyUpgrade podman-remoteUpgrade container-selinuxUpgrade criuUpgrade buildah-debugsourceUpgrade golang-binUpgrade libslirp-debugsourceUpgrade skopeoUpgrade containernetworking-pluginsUpgrade slirp4netns-debuginfoUpgrade buildah-testsUpgrade crunUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade toolboxUpgrade fuse-overlayfs-debugsourceUpgrade criu-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade runc-debugsourceUpgrade podman-remote-debuginfoUpgrade criu-debugsourceUpgrade buildah-debuginfoUpgrade conmon-debuginfoUpgrade buildahUpgrade go-toolsetUpgrade netavarkUpgrade fuse-overlayfs-debuginfoUpgrade containers-commonUpgrade crun-debugsourceUpgrade golangUpgrade python3-podmanUpgrade delve-debuginfoUpgrade golang-raceUpgrade aardvark-dnsUpgrade criu-libsUpgrade conmonUpgrade golang-miscUpgrade fuse-overlayfsUpgrade runc-debuginfoUpgrade conmon-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-srcUpgrade buildah-tests-debuginfoUpgrade libslirp-develUpgrade libslirpUpgrade crun-debuginfo | Nov 10, 2021 | Aug 8, 2021 |
| Rocky_linux | — | Upgrade fuse-overlayfs-debuginfoUpgrade libslirpUpgrade criu-develUpgrade runcUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade crunUpgrade libslirp-develUpgrade critUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade delveUpgrade criu-libs-debuginfoUpgrade slirp4netns-debugsourceUpgrade libslirp-debugsourceUpgrade toolboxUpgrade python3-criuUpgrade slirp4netns-debuginfoUpgrade conmonUpgrade toolbox-debuginfoUpgrade runc-debuginfoUpgrade toolbox-debugsourceUpgrade slirp4netnsUpgrade containernetworking-plugins-debuginfoUpgrade delve-debugsourceUpgrade golang-raceUpgrade containernetworking-plugins-debugsourceUpgrade libslirp-debuginfoUpgrade criuUpgrade golang-binUpgrade containernetworking-pluginsUpgrade fuse-overlayfsUpgrade runc-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade criu-debuginfoUpgrade criu-debugsourceUpgrade crun-debuginfoUpgrade delve-debuginfoUpgrade conmon-debugsourceUpgrade go-toolsetUpgrade conmon-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade golangUpgrade crun-debugsourceUpgrade criu-libsUpgrade toolbox-tests | Mar 12, 2024 | Aug 8, 2021 |
| Suse | — | Upgrade go1.15Upgrade go1.16-raceUpgrade go1.15-docUpgrade go1.16Upgrade go1.16-docUpgrade go1.15-race | Aug 21, 2021 | Aug 8, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 8, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub