VDB
RHBA-2021%3A0075
RHBA-2021%3A0075
PUBLISHED
CVSS 5.900000095367432 MEDIUM
A flaw was found Go's net/http package. Servers using ReverseProxy from net/http in the Go standard library are vulnerable to a data race that results in a denial of service. The highest threat from this vulnerability is to system availability.
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | distributed-tracing/jaeger-rhel8-operator@sha256:5d213b8efda4306a4f6f9044514e774273844979ac8eff800a5b26df2fbab66f_amd64 as a component of Red Hat OpenShift Jaeger 1.17 | distributed-tracing/jaeger-rhel8-operator@sha256:5d213b8efda4306a4f6f9044514e774273844979ac8eff800a5b26df2fbab66f_amd64 |
| Red Hat | distributed-tracing/jaeger-query-rhel8@sha256:d49f6f7ecf7ddbd1396dd90e010e8e5114a00599d3d8634b8637223588d8373d_amd64 as a component of Red Hat OpenShift Jaeger 1.17 | * |
| Red Hat | distributed-tracing/jaeger-ingester-rhel8@sha256:d1537f420ca359d42f6fd08e172141c79f8620a1f127f26b2752a88e0ad74ee7_amd64 as a component of Red Hat OpenShift Jaeger 1.17 | distributed-tracing/jaeger-ingester-rhel8@sha256:d1537f420ca359d42f6fd08e172141c79f8620a1f127f26b2752a88e0ad74ee7_amd64 |
| Red Hat | distributed-tracing/jaeger-all-in-one-rhel8@sha256:34c921522039f5e5e0ba5ae1a6ba23770bb9c0764741af3962e61b482d7e1944_amd64 as a component of Red Hat OpenShift Jaeger 1.17 | distributed-tracing/jaeger-all-in-one-rhel8@sha256:34c921522039f5e5e0ba5ae1a6ba23770bb9c0764741af3962e61b482d7e1944_amd64 |
| Red Hat | distributed-tracing/jaeger-es-index-cleaner-rhel8@sha256:033d0bd0557820974ec5a5be32cf94a30bfec7bc105c8733b0875357f6ff3f68_amd64 as a component of Red Hat OpenShift Jaeger 1.17 | distributed-tracing/jaeger-es-index-cleaner-rhel8@sha256:033d0bd0557820974ec5a5be32cf94a30bfec7bc105c8733b0875357f6ff3f68_amd64 |
| Red Hat | distributed-tracing/jaeger-collector-rhel8@sha256:882b833099b6dc5fafee6aae4bba040ca1c2b503832e16f0197fe37bec1bd53a_amd64 as a component of Red Hat OpenShift Jaeger 1.17 | distributed-tracing/jaeger-collector-rhel8@sha256:882b833099b6dc5fafee6aae4bba040ca1c2b503832e16f0197fe37bec1bd53a_amd64 |
| Red Hat | distributed-tracing/jaeger-es-rollover-rhel8@sha256:f9e37212306aa89aa9cded345c4a904cf9a32e37945acd59ea205e90d9850252_amd64 as a component of Red Hat OpenShift Jaeger 1.17 | distributed-tracing/jaeger-es-rollover-rhel8@sha256:f9e37212306aa89aa9cded345c4a904cf9a32e37945acd59ea205e90d9850252_amd64 |
| Red Hat | distributed-tracing/jaeger-agent-rhel8@sha256:e50a0aabf41bd8557cddf6d211d3a4fe3eeefd76c69f214764a46d39f30243f6_amd64 as a component of Red Hat OpenShift Jaeger 1.17 | distributed-tracing/jaeger-agent-rhel8@sha256:e50a0aabf41bd8557cddf6d211d3a4fe3eeefd76c69f214764a46d39f30243f6_amd64 |
Timeline
- Jan 12, 2021 CVE Published
- Mar 27, 2026 CVE Updated
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHBA-2021:0075 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhba-2021_0075.json advisory
- https://access.redhat.com/security/cve/CVE-2020-15586 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1856953 issue
- https://www.cve.org/CVERecord?id=CVE-2020-15586 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2020-15586 advisory
- https://groups.google.com/g/golang-announce/c/XZNfaiwgt2w/m/E6gHDs32AQAJ advisory
- https://access.redhat.com/security/cve/CVE-2020-16845 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1867099 issue
- https://www.cve.org/CVERecord?id=CVE-2020-16845 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2020-16845 advisory
- https://groups.google.com/g/golang-announce/c/NyPIaucMgXo advisory