Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time.
Project Subscriptions
Advisories
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-2459-1 | golang-1.7 security update |
Debian DLA |
DLA-2460-1 | golang-1.8 security update |
Debian DSA |
DSA-4848-1 | golang-1.11 security update |
EUVD |
EUVD-2020-7573 | Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-04T13:22:29.273Z
Reserved: 2020-07-07T00:00:00
Link: CVE-2020-15586
No data.
Status : Modified
Published: 2020-07-17T16:15:11.480
Modified: 2024-11-21T05:05:48.217
Link: CVE-2020-15586
OpenCVE Enrichment
No data.
Weaknesses
Debian DLA
Debian DSA
EUVD