vulnerability
FreeBSD: VID-880552c4-f63f-11eb-9d56-7186043316e9 (CVE-2021-36221): go -- net/http: panic due to racy read of persistConn after handler panic
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:N/C:N/I:N/A:P) | Aug 5, 2021 | Nov 4, 2022 | Mar 25, 2026 |
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:P)
Published
Aug 5, 2021
Added
Nov 4, 2022
Modified
Mar 25, 2026
Description
The Go project reports: A net/http/httputil ReverseProxy can panic due to a race condition if its Handler aborts with ErrAbortHandler, for example due to an error in copying the response body. An attacker might be able to force the conditions leading to the race condition.
Solution
freebsd-upgrade-package-go
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.