Lucene search
Gentoo FoundationMGASA-2021-0387HistoryJul 28, 2021 - 11:00 p.m.
Updated varnish packages fix a security vulnerability
2021-07-2823:00:51
Gentoo Foundation
advisories.mageia.org
28
0.005 Low
EPSS
Percentile
75.6%
Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a large Content-Length header for a POST request. This affects Varnish Enterprise 6.0.x before 6.0.8r3, and Varnish Cache 5.x and 6.x before 6.5.2, 6.6.x before 6.6.1, and 6.0 LTS before 6.0.8 (CVE-2021-36740).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 8 | noarch | varnish | < 6.5.1-1.1 | varnish-6.5.1-1.1.mga8 |
Related
nessus
nessus
RHEL 7 : rh-varnish6-varnish (RHSA-2021:2993)
2021-08-09 00:00:00
Oracle Linux 8 : varnish:6 (ELSA-2021-2988)
2021-08-03 00:00:00
CentOS 8 : varnish:6 (CESA-2021:2988)
2021-08-09 00:00:00
ubuntucve
ubuntucve
CVE-2021-36740
2021-07-14 00:00:00
almalinux
almalinux
Important: varnish:6 security update
2021-08-02 14:30:38
redhat
redhat
(RHSA-2021:2988) Important: varnish:6 security update
2021-08-02 14:30:38
(RHSA-2021:2993) Important: rh-varnish6-varnish security update
2021-08-03 08:11:12
veracode
veracode
Authorization Bypass
2021-07-19 00:55:44
fedora
fedora
[SECURITY] Fedora 34 Update: varnish-modules-0.17.1-2.fc34
2021-07-25 01:03:43
[SECURITY] Fedora 34 Update: varnish-6.5.2-1.fc34
2021-07-25 01:03:42
[SECURITY] Fedora 33 Update: varnish-6.4.0-5.fc33
2021-07-25 01:05:53
cve
cve
CVE-2021-36740
2021-07-14 17:15:00
osv
osv
CVE-2021-36740
2021-07-14 17:15:08
BIT-varnish-2021-36740
2024-03-06 11:08:33
Important: varnish:6 security update
2021-08-02 14:30:38
openvas
openvas
Fedora: Security Advisory for varnish (FEDORA-2021-cf7585f0ca)
2021-07-27 00:00:00
Fedora: Security Advisory for vmod-uuid (FEDORA-2021-cf7585f0ca)
2021-07-27 00:00:00
Fedora: Security Advisory for varnish-modules (FEDORA-2021-cf7585f0ca)
2021-07-27 00:00:00
redhatcve
redhatcve
CVE-2021-36740
2021-07-14 19:25:13
cvelist
cvelist
CVE-2021-36740
2021-07-14 16:07:28
debiancve
debiancve
CVE-2021-36740
2021-07-14 17:15:00
prion
prion
Authorization
2021-07-14 17:15:00
oraclelinux
oraclelinux
varnish:6 security update
2021-08-03 00:00:00
archlinux
archlinux
[ASA-202107-28] varnish: url request injection
2021-07-14 00:00:00
rocky
rocky
varnish:6 security update
2021-08-02 14:30:38
alpinelinux
alpinelinux
CVE-2021-36740
2021-07-14 17:15:00
suse
suse
Security update for varnish (important)
2022-05-27 00:00:00
debian
debian
[SECURITY] [DSA 5088-1] varnish security update
2022-03-03 19:57:43
ubuntu
ubuntu
Varnish Cache vulnerabilities
2022-06-08 00:00:00