CVE-2021-36221

Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort.

Link	Resource
https://groups.google.com/g/golang-announce/c/JvWG9FUUYT0	Mailing List Third Party Advisory
https://groups.google.com/forum/#!forum/golang-announce	Mailing List Release Notes
https://groups.google.com/g/golang-announce/c/uHACNfXAZqk	Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J4AMYYHGBYMIWCCR5RCDFI5RAUJOPO5L/	Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MU47VKTNXX33ZDLTI2ORRUY3KLJKU6G/	Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HM7U5JNS5WU66Q3S26PFIU2ITB2ATTQ4/	Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/01/msg00017.html	Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/01/msg00016.html	Mailing List Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2022.html	Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf	Patch Third Party Advisory
https://security.gentoo.org/glsa/202208-02	Third Party Advisory

Configuration 1

cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:timesten_in-memory_database:*:*:*:*:*:*:*:*

---

Published : 2021-08-08 06:15

Updated : 2022-09-14 09:11

---

NVD link : CVE-2021-36221

Mitre link : CVE-2021-36221

No products.

CWE-362