CVE-2021-36221
Fixed in a distro release EPSS 3%
Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort.
Products: golang go, fedoraproject fedora, debian_linux, oracle timesten_in-memory_database, siemens scalance_lpe9403_firmware
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | stdlib | 1.15.15 |
| Go | stdlib | 1.16.7 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | delve | 1.6.0-1.module_el8.5.0+2604+960c7771 |
| Amazon Linux 2 | golang | 1.16.15-1.amzn2.0.1 |
| Amazon Linux 2 | golang-bin | 1.16.15-1.amzn2.0.1 |
| Amazon Linux 2 | golang-docs | 1.16.15-1.amzn2.0.1 |
| Amazon Linux 2 | golang-misc | 1.16.15-1.amzn2.0.1 |
| Amazon Linux 2 | golang-race | 1.16.15-1.amzn2.0.1 |
| Amazon Linux 2 | golang-shared | 1.16.15-1.amzn2.0.1 |
| Amazon Linux 2 | golang-src | 1.16.15-1.amzn2.0.1 |
| Amazon Linux 2 | golang-tests | 1.16.15-1.amzn2.0.1 |
| Arch Linux | go | 2:1.16.7-1 |
| Debian 10 | golang-1.11 | 1.11.6-1+deb10u6 |
| Debian 11 | golang-1.15 | 1.15.15-1~deb11u1 |
| Debian 9 | golang-1.7 | 1.7.4-2+deb9u4 |
| Debian 9 | golang-1.8 | 1.8.1-1+deb9u4 |
| Red Hat Enterprise Linux 8 | aardvark-dns | 2:1.1.0-4.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | buildah | 1:1.27.0-2.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | buildah-debuginfo | 1:1.27.0-2.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | buildah-debugsource | 1:1.27.0-2.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | buildah-tests | 1:1.27.0-2.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | buildah-tests-debuginfo | 1:1.27.0-2.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | cockpit-podman | 0:53-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | conmon | 3:2.1.4-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | conmon-debuginfo | 3:2.1.4-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | conmon-debugsource | 3:2.1.4-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | container-selinux | 2:2.189.0-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | containernetworking-plugins | 1:1.1.1-3.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | containernetworking-plugins-debuginfo | 1:1.1.1-3.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | containernetworking-plugins-debugsource | 1:1.1.1-3.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | containers-common | 2:1-40.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | crit | 0:3.15-3.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | criu | 0:3.15-3.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | criu-debuginfo | 0:3.15-3.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | criu-debugsource | 0:3.15-3.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | criu-devel | 0:3.15-3.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | criu-libs | 0:3.15-3.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | criu-libs-debuginfo | 0:3.15-3.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | crun | 0:1.5-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | crun-debuginfo | 0:1.5-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | crun-debugsource | 0:1.5-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | delve | 0:1.6.0-1.module+el8.5.0+10379+d6b83bd0 |
| Red Hat Enterprise Linux 8 | delve-debuginfo | 0:1.6.0-1.module+el8.5.0+10379+d6b83bd0 |
| Red Hat Enterprise Linux 8 | delve-debugsource | 0:1.6.0-1.module+el8.5.0+10379+d6b83bd0 |
| Red Hat Enterprise Linux 8 | fuse-overlayfs | 0:1.9-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | fuse-overlayfs-debuginfo | 0:1.9-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | fuse-overlayfs-debugsource | 0:1.9-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | go-toolset | 0:1.16.7-1.module+el8.5.0+12246+1aac4e3f |
| Red Hat Enterprise Linux 8 | golang | 0:1.16.7-1.module+el8.5.0+12246+1aac4e3f |
| Red Hat Enterprise Linux 8 | golang-bin | 0:1.16.7-1.module+el8.5.0+12246+1aac4e3f |
| Red Hat Enterprise Linux 8 | golang-docs | 0:1.16.7-1.module+el8.5.0+12246+1aac4e3f |
| Red Hat Enterprise Linux 8 | golang-misc | 0:1.16.7-1.module+el8.5.0+12246+1aac4e3f |
| Red Hat Enterprise Linux 8 | golang-race | 0:1.16.7-1.module+el8.5.0+12246+1aac4e3f |
| Red Hat Enterprise Linux 8 | golang-src | 0:1.16.7-1.module+el8.5.0+12246+1aac4e3f |
| Red Hat Enterprise Linux 8 | golang-tests | 0:1.16.7-1.module+el8.5.0+12246+1aac4e3f |
| Red Hat Enterprise Linux 8 | libslirp | 0:4.4.0-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | libslirp-debuginfo | 0:4.4.0-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | libslirp-debugsource | 0:4.4.0-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | libslirp-devel | 0:4.4.0-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | netavark | 2:1.1.0-6.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | oci-seccomp-bpf-hook | 0:1.2.6-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | oci-seccomp-bpf-hook-debuginfo | 0:1.2.6-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | oci-seccomp-bpf-hook-debugsource | 0:1.2.6-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | podman | 3:4.2.0-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | podman-catatonit | 3:4.2.0-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | podman-catatonit-debuginfo | 3:4.2.0-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | podman-debuginfo | 3:4.2.0-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | podman-debugsource | 3:4.2.0-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | podman-docker | 3:4.2.0-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | podman-gvproxy | 3:4.2.0-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | podman-gvproxy-debuginfo | 3:4.2.0-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | podman-plugins | 3:4.2.0-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | podman-plugins-debuginfo | 3:4.2.0-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | podman-remote | 3:4.2.0-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | podman-remote-debuginfo | 3:4.2.0-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | podman-tests | 3:4.2.0-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | python-podman | 0:4.2.0-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | python3-criu | 0:3.15-3.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | python3-podman | 0:4.2.0-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | runc | 1:1.1.4-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | runc-debuginfo | 1:1.1.4-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | runc-debugsource | 1:1.1.4-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | skopeo | 2:1.9.2-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | skopeo-debuginfo | 2:1.9.2-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | skopeo-debugsource | 2:1.9.2-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | skopeo-tests | 2:1.9.2-1.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | slirp4netns | 0:1.2.0-2.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | slirp4netns-debuginfo | 0:1.2.0-2.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | slirp4netns-debugsource | 0:1.2.0-2.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | toolbox | 0:0.0.99.3-0.6.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | toolbox-debuginfo | 0:0.0.99.3-0.6.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | toolbox-debugsource | 0:0.0.99.3-0.6.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | toolbox-tests | 0:0.0.99.3-0.6.module+el8.7.0+16772+33343656 |
| Red Hat Enterprise Linux 8 | udica | 0:0.2.6-3.module+el8.7.0+16772+33343656 |
| Red Hat openshift 4.9 | butane | 0:0.13.1-2.rhaos4.9.el8 |
| Red Hat openshift 4.9 | butane-debuginfo | 0:0.13.1-2.rhaos4.9.el8 |
| Red Hat openshift 4.9 | butane-debugsource | 0:0.13.1-2.rhaos4.9.el8 |
| Red Hat openshift 4.9 | butane-redistributable | 0:0.13.1-2.rhaos4.9.el8 |
| Red Hat openshift 4.9 | cri-o | 0:1.22.1-17.rhaos4.9.git3029b1d.2.el8 |
| Red Hat openshift 4.9 | cri-o | 0:1.22.1-17.rhaos4.9.git3029b1d.el7 |
| Red Hat openshift 4.9 | cri-o-debuginfo | 0:1.22.1-17.rhaos4.9.git3029b1d.el7 |
| Red Hat openshift 4.9 | cri-o-debuginfo | 0:1.22.1-17.rhaos4.9.git3029b1d.2.el8 |
| Red Hat openshift 4.9 | cri-o-debugsource | 0:1.22.1-17.rhaos4.9.git3029b1d.2.el8 |
| Red Hat openshift 4.9 | cri-tools | 0:1.22.0-2.el8 |
| Red Hat openshift 4.9 | cri-tools-debuginfo | 0:1.22.0-2.el8 |
| Red Hat openshift 4.9 | cri-tools-debugsource | 0:1.22.0-2.el8 |
| Red Hat openshift 4.9 | golang-github-prometheus-promu | 0:0.5.0-5.git642a960.el8 |
| Red Hat openshift 4.9 | ignition | 0:2.12.0-3.rhaos4.9.el8 |
| Red Hat openshift 4.9 | ignition-debuginfo | 0:2.12.0-3.rhaos4.9.el8 |
| Red Hat openshift 4.9 | ignition-debugsource | 0:2.12.0-3.rhaos4.9.el8 |
| Red Hat openshift 4.9 | ignition-validate | 0:2.12.0-3.rhaos4.9.el8 |
| Red Hat openshift 4.9 | ignition-validate-debuginfo | 0:2.12.0-3.rhaos4.9.el8 |
| Red Hat openshift 4.9 | openshift | 0:4.9.0-202202111950.p0.gb93fd35.assembly.stream.el8 |
| Red Hat openshift 4.9 | openshift | 0:4.9.0-202202111950.p0.gb93fd35.assembly.stream.el7 |
| Red Hat openshift 4.9 | openshift-clients | 0:4.9.0-202202140924.p0.g340e212.assembly.stream.el7 |
| Red Hat openshift 4.9 | openshift-clients | 0:4.9.0-202202140924.p0.g340e212.assembly.stream.el8 |
| Red Hat openshift 4.9 | openshift-clients-redistributable | 0:4.9.0-202202140924.p0.g340e212.assembly.stream.el7 |
| Red Hat openshift 4.9 | openshift-clients-redistributable | 0:4.9.0-202202140924.p0.g340e212.assembly.stream.el8 |
| Red Hat openshift 4.9 | openshift-hyperkube | 0:4.9.0-202202111950.p0.gb93fd35.assembly.stream.el8 |
| Red Hat openshift 4.9 | openshift-hyperkube | 0:4.9.0-202202111950.p0.gb93fd35.assembly.stream.el7 |
| Red Hat openshift 4.9 | prometheus-promu | 0:0.5.0-5.git642a960.el8 |
| Red Hat openshift data foundation 4.10 | mcg | 0:5.10.0-72.el8 |
| Red Hat openshift data foundation 4.10 | mcg-redistributable | 0:5.10.0-72.el8 |
| Red Hat serverless 1.0 | openshift-serverless-clients | 0:0.25.1-1.el8 |
| Red Hat service mesh 2.0 | kiali | 0:v1.24.7.redhat1-1.el8 |
| Red Hat service mesh 2.0 | servicemesh | 0:2.0.9-3.el8 |
| Red Hat service mesh 2.0 | servicemesh-istioctl | 0:2.0.9-3.el8 |
| Red Hat service mesh 2.0 | servicemesh-mixc | 0:2.0.9-3.el8 |
| Red Hat service mesh 2.0 | servicemesh-mixs | 0:2.0.9-3.el8 |
| Red Hat service mesh 2.0 | servicemesh-pilot-agent | 0:2.0.9-3.el8 |
| Red Hat service mesh 2.0 | servicemesh-pilot-discovery | 0:2.0.9-3.el8 |
| Red Hat service mesh 2.0 | servicemesh-prometheus | 0:2.14.0-16.el8.1 |
| Red Hat service mesh 2.0 | servicemesh-proxy | 0:2.0.9-3.el8 |
| Rocky Linux 8 | cockpit-podman | 0:53-1.module+el8.7.0+1078+e72fcd4f |
| Rocky Linux 8 | conmon | 2:2.1.4-1.module+el8.7.0+1077+0e4f03d4 |
| Rocky Linux 8 | container-selinux | 2:2.189.0-1.module+el8.6.0+1054+50b00ff4 |
| Rocky Linux 8 | container-selinux | 2:2.189.0-1.module+el8.7.0+1076+9b1c11c1 |
| Rocky Linux 8 | containernetworking-plugins | 1:1.1.1-3.module+el8.6.0+1054+50b00ff4 |
| Rocky Linux 8 | containernetworking-plugins | 1:1.1.1-3.module+el8.7.0+1078+e72fcd4f |
| Rocky Linux 8 | criu | 0:3.15-3.module+el8.6.0+1054+50b00ff4 |
| Rocky Linux 8 | criu | 0:3.15-3.module+el8.7.0+1077+0e4f03d4 |
| Rocky Linux 8 | criu | 0:3.15-3.module+el8.5.0+710+4c471e88 |
| Rocky Linux 8 | crun | 0:1.5-1.module+el8.6.0+1054+50b00ff4 |
| Rocky Linux 8 | crun | 0:1.5-1.module+el8.7.0+1077+0e4f03d4 |
| Rocky Linux 8 | delve | 0:1.6.0-1.module+el8.5.0+694+f77f0bfd |
| Rocky Linux 8 | fuse-overlayfs | 0:1.9-1.module+el8.6.0+1054+50b00ff4 |
| Rocky Linux 8 | fuse-overlayfs | 0:1.9-1.module+el8.7.0+1077+0e4f03d4 |
| Rocky Linux 8 | go-toolset | 0:1.16.7-1.module+el8.5.0+694+f77f0bfd |
| Rocky Linux 8 | golang | 0:1.16.7-1.module+el8.5.0+694+f77f0bfd |
| Rocky Linux 8 | libslirp | 0:4.4.0-1.module+el8.7.0+1077+0e4f03d4 |
| Rocky Linux 8 | libslirp | 0:4.4.0-1.module+el8.5.0+710+4c471e88 |
| Rocky Linux 8 | libslirp | 0:4.4.0-1.module+el8.6.0+1054+50b00ff4 |
| Rocky Linux 8 | oci-seccomp-bpf-hook | 0:1.2.6-1.module+el8.6.0+1054+50b00ff4 |
| Rocky Linux 8 | oci-seccomp-bpf-hook | 0:1.2.6-1.module+el8.7.0+1078+e72fcd4f |
| Rocky Linux 8 | runc | 1:1.1.4-1.module+el8.7.0+1077+0e4f03d4 |
| Rocky Linux 8 | slirp4netns | 0:1.2.0-2.module+el8.7.0+1078+e72fcd4f |
| Rocky Linux 8 | slirp4netns | 0:1.2.0-2.module+el8.6.0+1054+50b00ff4 |
| Rocky Linux 8 | toolbox | 0:0.0.99.3-0.6.module+el8.7.0+1078+e72fcd4f |
| Rocky Linux 8 | toolbox | 0:0.0.99.3-0.6.module+el8.6.0+1054+50b00ff4 |
| Rocky Linux 8 | udica | 0:0.2.6-3.module+el8.6.0+971+69b94baf |
| Rocky Linux 8 | udica | 0:0.2.6-3.module+el8.7.0+1077+0e4f03d4 |
| SUSE Enterprise Storage 6 | go1.15 | 1.15.15-1.39.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | go1.15 | 1.15.15-1.39.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | go1.15 | 1.15.15-1.39.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP2 | go1.15 | 1.15.15-1.39.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP2 | go1.16 | 1.16.7-1.23.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP3 | go1.15 | 1.15.15-1.39.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP3 | go1.16 | 1.16.7-1.23.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | go1.15 | 1.15.15-1.39.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | go1.15 | 1.15.15-1.39.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | go1.15 | 1.15.15-1.39.1 |
| SUSE Manager Proxy 4.0 | go1.15 | 1.15.15-1.39.1 |
| SUSE Manager Retail Branch Server 4.0 | go1.15 | 1.15.15-1.39.1 |
| SUSE Manager Server 4.0 | go1.15 | 1.15.15-1.39.1 |
| Ubuntu 14.04 LTS | golang-1.10 | no fix |
| Ubuntu 16.04 LTS | golang-1.10 | no fix |
| Ubuntu 16.04 LTS | golang-1.6 | no fix |
| Ubuntu 18.04 LTS | golang-1.10 | no fix |
| Ubuntu 18.04 LTS | golang-1.8 | no fix |
| Ubuntu 18.04 LTS | golang-1.9 | no fix |
| Ubuntu 20.04 LTS | golang-1.13 | no fix |
| Ubuntu 20.04 LTS | golang-1.14 | no fix |
| Ubuntu Pro 16.04 LTS | golang-1.13 | no fix |
| Ubuntu Pro 18.04 LTS | golang-1.13 | no fix |
| Ubuntu Pro 18.04 LTS | golang-1.16 | no fix |
| Ubuntu Pro 20.04 LTS | golang-1.16 | no fix |
| Ubuntu Pro 22.04 LTS | golang-1.13 | no fix |
| openSUSE Leap 15.2 | go1.15 | 1.15.15-lp152.26.1 |
| openSUSE Leap 15.2 | go1.16 | 1.16.7-lp152.8.1 |
| openSUSE Leap 15.3 | go1.15 | 1.15.15-1.39.1 |
| openSUSE Leap 15.3 | go1.16 | 1.16.7-1.23.1 |
| openSUSE Tumbleweed | go1.15 | 1.15.15-1.2 |
| openSUSE Tumbleweed | go1.16 | 1.16.8-1.1 |