Lucene search
+L

79 matches found

Mageia
Mageia
•added 2021/09/04 5:01 p.m.•55 views

Updated golang packages fix security vulnerability

The updated golang packages fix a security vulnerability: Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort CVE-2021-36221...

5.9CVSS6.9AI score0.03114EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2021/08/21 12:00 a.m.•35 views

openSUSE 15 Security Update : go1.15 (openSUSE-SU-2021:2787-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:2787-1 advisory. - Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler...

5.9CVSS6.8AI score0.03114EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2021/08/21 12:00 a.m.•24 views

SUSE SLED15 / SLES15 Security Update : go1.15 (SUSE-SU-2021:2787-1)

The remote SUSE Linux SLED15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2787-1 advisory. Update to go1.15.15: - go47473 net/http: panic due to racy read of persistConn after handler panic CVE-2021-36221 bsc1189162 -...

5.9CVSS6.9AI score0.03114EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2021/08/10 12:00 a.m.•54 views

RHEL 7 / 8 : OpenShift Container Platform 4.8.4 (RHSA-2021:2984)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2984 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...

7.5CVSS6.6AI score0.06975EPSS
SaveExploits5References16
NVD
NVD
•added 2021/08/08 6:15 a.m.•29 views

CVE-2021-36221

Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort...

5.9CVSS0.03114EPSS
SaveExploits0References12
OSV
OSV
•added 2021/08/08 6:15 a.m.•35 views

CVE-2021-36221

Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort...

5.9CVSS6.6AI score
SaveExploits0References12
Prion
Prion
•added 2021/08/08 6:15 a.m.•32 views

Race condition

Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort...

4.3CVSS6.4AI score0.03114EPSS
SaveExploits0References12Affected Software5
UbuntuCve
UbuntuCve
•added 2021/08/08 6:15 a.m.•56 views

CVE-2021-36221

Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort...

5.9CVSS6.8AI score0.03114EPSS
SaveExploits0References5
AlpineLinux
AlpineLinux
•added 2021/08/08 12:00 a.m.•65 views

CVE-2021-36221

Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort...

5.9CVSS6.8AI score0.03114EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/08/08 12:00 a.m.•36 views

CVE-2021-36221

Removed by vendor...

5.9CVSS7AI score0.03114EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/08 12:00 a.m.•4 views

CVE-2021-36221: Concurrent Execution using Shared Resource with Improper Synchronization

Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort...

5.9CVSS6.6AI score0.03114EPSS
SaveExploits0References2
NVD
NVD
•added 2021/08/02 7:15 p.m.•31 views

CVE-2021-33197

In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy from net/http/httputil result in a situation where an attacker is able to drop arbitrary headers...

5.3CVSS0.0226EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2021/08/02 7:15 p.m.•39 views

CVE-2021-33197

In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy from net/http/httputil result in a situation where an attacker is able to drop arbitrary headers...

5.3CVSS6.6AI score0.0226EPSS
SaveExploits1References3
CVE
CVE
•added 2021/08/02 6:54 p.m.•489 views

CVE-2021-33197

The CVE-2021-33197 entry concerns the Go standard library’s ReverseProxy (net/http/httputil). Affected Go versions: before 1.15.13 and 1.16.x before 1.16.5. The underlying issue is described as: certain ReverseProxy configurations can cause an attacker to drop arbitrary headers. Impact, per the p...

5.3CVSS6.6AI score0.0226EPSS
SaveExploits1References3Affected Software1
AlpineLinux
AlpineLinux
•added 2021/08/02 6:54 p.m.•53 views

CVE-2021-33197

In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy from net/http/httputil result in a situation where an attacker is able to drop arbitrary headers...

5.3CVSS6.6AI score0.0226EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/02 12:00 a.m.•3 views

CVE-2021-33197: Missing Authorization

In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy from net/http/httputil result in a situation where an attacker is able to drop arbitrary headers...

5.3CVSS6.3AI score0.0226EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2021/07/02 12:00 a.m.•79 views

openSUSE: Security Advisory for go1.15 (openSUSE-SU-2021:0950-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS6.7AI score0.03464EPSS
SaveExploits4References2
Tenable Nessus
Tenable Nessus
•added 2021/06/04 12:00 a.m.•160 views

FreeBSD : go -- multiple vulnerabilities (079b3641-c4bd-11eb-a22a-693f0544ae52)

The Go project reports : The SetString and UnmarshalText methods of math/big.Rat may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents. ReverseProxy in net/http/httputil could be made to forward certain hop-by-hop headers, including Connection. In case the...

7.5CVSS6.7AI score0.03464EPSS
SaveExploits4References9
FreeBSD
FreeBSD
•added 2021/05/01 12:00 a.m.•57 views

go -- multiple vulnerabilities

The Go project reports: The SetString and UnmarshalText methods of math/big.Rat may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents. ReverseProxy in net/http/httputil could be made to forward certain hop-by-hop headers, including Connection. In case the...

0.1AI score
SaveExploits0References4
Rows per page
Query Builder