PT-2021-21184
CVE-2021-36221
·
تاريخ النشر
2021-02-19
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 3.1
5.9
متوسطةالمقاييسAV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Go versions 1.15.x through 1.15.14
Go versions 1.16.x through 1.16.6
Description
The issue is related to a race condition that can cause a net/http/httputil ReverseProxy panic when an ErrAbortHandler abort occurs. This happens when there is a problem copying a proxied response body, leading to a panic in the ReverseProxy.
Recommendations
For Go versions 1.15.x through 1.15.14, update to version 1.15.15 or later to resolve the issue.
For Go versions 1.16.x through 1.16.6, update to version 1.16.7 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾