Lucene search
+L

104 matches found

Mageia
Mageia
•added 2021/09/04 5:01 p.m.•55 views

Updated golang packages fix security vulnerability

The updated golang packages fix a security vulnerability: Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort CVE-2021-36221...

5.9CVSS6.9AI score0.03114EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2021/09/02 12:00 a.m.•96 views

RHEL 7 / 8 : OpenShift Container Platform 4.8.9 (RHSA-2021:3248)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3248 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...

7.5CVSS6.6AI score0.06975EPSS
SaveExploits4References15
Tenable Nessus
Tenable Nessus
•added 2021/08/21 12:00 a.m.•35 views

openSUSE 15 Security Update : go1.15 (openSUSE-SU-2021:2787-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:2787-1 advisory. - Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler...

5.9CVSS6.8AI score0.03114EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2021/08/21 12:00 a.m.•24 views

SUSE SLED15 / SLES15 Security Update : go1.15 (SUSE-SU-2021:2787-1)

The remote SUSE Linux SLED15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2787-1 advisory. Update to go1.15.15: - go47473 net/http: panic due to racy read of persistConn after handler panic CVE-2021-36221 bsc1189162 -...

5.9CVSS6.9AI score0.03114EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2021/08/10 12:00 a.m.•54 views

RHEL 7 / 8 : OpenShift Container Platform 4.8.4 (RHSA-2021:2984)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2984 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...

7.5CVSS6.6AI score0.06975EPSS
SaveExploits5References16
OSV
OSV
•added 2021/08/08 6:15 a.m.•35 views

CVE-2021-36221

Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort...

5.9CVSS6.6AI score
SaveExploits0References12
NVD
NVD
•added 2021/08/08 6:15 a.m.•29 views

CVE-2021-36221

Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort...

5.9CVSS0.03114EPSS
SaveExploits0References12
Prion
Prion
•added 2021/08/08 6:15 a.m.•32 views

Race condition

Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort...

4.3CVSS6.4AI score0.03114EPSS
SaveExploits0References12Affected Software5
UbuntuCve
UbuntuCve
•added 2021/08/08 6:15 a.m.•56 views

CVE-2021-36221

Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort...

5.9CVSS6.8AI score0.03114EPSS
SaveExploits0References5
AlpineLinux
AlpineLinux
•added 2021/08/08 12:00 a.m.•65 views

CVE-2021-36221

Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort...

5.9CVSS6.8AI score0.03114EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/08/08 12:00 a.m.•36 views

CVE-2021-36221

Removed by vendor...

5.9CVSS7AI score0.03114EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/08 12:00 a.m.•4 views

CVE-2021-36221: Concurrent Execution using Shared Resource with Improper Synchronization

Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort...

5.9CVSS6.6AI score0.03114EPSS
SaveExploits0References2
OSV
OSV
•added 2021/08/02 7:15 p.m.•11 views

AZL-98925 CVE-2021-33197 affecting package golang 1.27.1-1

In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy from net/http/httputil result in a situation where an attacker is able to drop arbitrary headers...

5.3CVSS6.3AI score0.0226EPSS
SaveExploits1References1
OSV
OSV
•added 2021/08/02 7:15 p.m.•4 views

DEBIAN-CVE-2021-33197

In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy from net/http/httputil result in a situation where an attacker is able to drop arbitrary headers...

5.3CVSS6.6AI score0.0226EPSS
SaveExploits1References1
NVD
NVD
•added 2021/08/02 7:15 p.m.•30 views

CVE-2021-33197

In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy from net/http/httputil result in a situation where an attacker is able to drop arbitrary headers...

5.3CVSS0.0226EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2021/08/02 7:15 p.m.•39 views

CVE-2021-33197

In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy from net/http/httputil result in a situation where an attacker is able to drop arbitrary headers...

5.3CVSS6.6AI score0.0226EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2021/08/02 7:15 p.m.•8 views

CVE-2021-33197

In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy from net/http/httputil result in a situation where an attacker is able to drop arbitrary headers...

5.3CVSS6.6AI score0.0226EPSS
SaveExploits1References4
CVE
CVE
•added 2021/08/02 6:54 p.m.•489 views

CVE-2021-33197

The CVE-2021-33197 entry concerns the Go standard library’s ReverseProxy (net/http/httputil). Affected Go versions: before 1.15.13 and 1.16.x before 1.16.5. The underlying issue is described as: certain ReverseProxy configurations can cause an attacker to drop arbitrary headers. Impact, per the p...

5.3CVSS6.6AI score0.0226EPSS
SaveExploits1References3Affected Software1
AlpineLinux
AlpineLinux
•added 2021/08/02 6:54 p.m.•53 views

CVE-2021-33197

In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy from net/http/httputil result in a situation where an attacker is able to drop arbitrary headers...

5.3CVSS6.6AI score0.0226EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/02 12:00 a.m.•3 views

CVE-2021-33197: Missing Authorization

In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy from net/http/httputil result in a situation where an attacker is able to drop arbitrary headers...

5.3CVSS6.3AI score0.0226EPSS
SaveExploits1References2
Rows per page
Query Builder