Lucene search

K
osvGoogleOSV:USN-5474-2
HistoryAug 23, 2022 - 7:00 p.m.

varnish regression

2022-08-2319:00:19
Google
osv.dev
5

7.3 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.4%

USN-5474-1 fixed vulnerabilities in Varnish Cache. Unfortunately the fix for
CVE-2020-11653 was incomplete. This update fixes the problem.

Original advisory details:

It was discovered that Varnish Cache could have an assertion failure when a
TLS termination proxy uses PROXY version 2. A remote attacker could possibly
use this issue to restart the daemon and cause a performance loss.
(CVE-2020-11653)