Design/Logic Flaw

An issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x and 6.2.x before 6.2.1. An HTTP/1 parsing failure allows a remote attacker to trigger an assert by sending crafted HTTP/1 requests. The assert will cause an automatic restart with a clean cache, which makes it a Denial of Servic...

CVE-2019-15892

An issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x and 6.2.x before 6.2.1. An HTTP/1 parsing failure allows a remote attacker to trigger an assert by sending crafted HTTP/1 requests. The assert will cause an automatic restart with a clean cache, which makes it a Denial of Servic...

CVE-2019-15892

CVE-2019-15892 affects Varnish Cache before 6.0.4 LTS and 6.1.x and before 6.2.1 in the 6.2.x line. An HTTP/1 parsing failure allows a remote attacker to trigger an assert, causing an automatic restart with a clean cache and resulting in a Denial of Service. The available fixes are to upgrade to ...

CVE-2019-15892

An issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x and 6.2.x before 6.2.1. An HTTP/1 parsing failure allows a remote attacker to trigger an assert by sending crafted HTTP/1 requests. The assert will cause an automatic restart with a clean cache, which makes it a Denial of Servic...

CVE-2019-15892

An issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x and 6.2.x before 6.2.1. An HTTP/1 parsing failure allows a remote attacker to trigger an assert by sending crafted HTTP/1 requests. The assert will cause an automatic restart with a clean cache, which makes it a Denial of Servic...

PT-2019-3468

Name of the Vulnerable Software and Affected Versions Varnish Cache versions prior to 6.0.4 LTS Varnish Cache versions 6.1.x through 6.2.0 Description An issue in Varnish Cache allows a remote attacker to trigger an assert by sending crafted HTTP/1 requests, causing an automatic restart with a...

[SECURITY] Fedora 25 Update: varnish-5.0.0-5.fc25

This is Varnish Cache, a high-performance HTTP accelerator. Varnish Cache stores web pages in memory so web servers don't have to create the same web page over and over again. Varnish Cache serves pages much faster than any application server; giving the website a significant speed up...

[SECURITY] Fedora 26 Update: varnish-5.1.3-4.fc26

This is Varnish Cache, a high-performance HTTP accelerator. Varnish Cache stores web pages in memory so web servers don=EF=BF=BD=EF=BF =BD=EF=BF=BDt have to create the same web page over and over again. Varnish Cache serves pages much faster than any application server; giving the website a...

[SECURITY] Fedora 27 Update: varnish-5.1.3-4.fc27

This is Varnish Cache, a high-performance HTTP accelerator. Varnish Cache stores web pages in memory so web servers don=EF=BF=BD=EF=BF =BD=EF=BF=BDt have to create the same web page over and over again. Varnish Cache serves pages much faster than any application server; giving the website a...

Varnish HTTP Cache Information Disclosure Vulnerability

Varnish HTTP Cache is a high-performance, open source reverse proxy server and caching server developed by Danish software developer Poul-Henning Kamp. The server uses Visual Page Cache technology, which enables all cached data to be read directly from memory, thus increasing access speed. A...

PT-2017-18542 · Varnish +1 · Varnish Http Cache +1

Name of the Vulnerable Software and Affected Versions: Varnish HTTP Cache versions 4.1.x through 4.1.8 Varnish HTTP Cache versions 5.x through 5.2.0 Description: The issue allows remote attackers to obtain sensitive information from process memory due to a VFP GetStorage buffer being larger than...

[SECURITY] Fedora 25 Update: varnish-5.0.0-4.fc25

This is Varnish Cache, a high-performance HTTP accelerator. Varnish Cache stores web pages in memory so web servers don't have to create the same web page over and over again. Varnish Cache serves pages much faster than any application server; giving the website a significant speed up...

[SECURITY] Fedora 26 Update: varnish-5.1.3-2.fc26

This is Varnish Cache, a high-performance HTTP accelerator. Varnish Cache stores web pages in memory so web servers don=EF=BF=BD=EF=BF =BD=EF=BF=BDt have to create the same web page over and over again. Varnish Cache serves pages much faster than any application server; giving the website a...

Varnish HTTP Cache Denial of Service Vulnerability

Varnish HTTP Cache is a reverse proxy server and cache server developed by Danish software developer Poul-Henning Kamp. The server uses Visual Page Cache technology, which enables all cached data to be read directly from memory, thus increasing access speeds. A security vulnerability exists in...

Varnish Cache CLI File Read

This module attempts to read the first line of a file by abusing the error message when compiling a file with vcl.load. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'metasploit/framework/tcp/client' require...

Varnish Cache CLI Login Utility

This module attempts to login to the Varnish Cache varnishd CLI instance using a bruteforce list of passwords. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'metasploit/framework/credentialcollection' requir...

Debian Security Advisory DSA 3553-1 (varnish - security update)

Regis Leroy from Makina Corpus discovered that varnish, a caching HTTP reverse proxy, is vulnerable to HTTP smuggling issues, potentially resulting in cache poisoning or bypassing of access control policies. OpenVAS Vulnerability Test $Id: deb3553.nasl 6608 2017-07-07 12:05:05Z cfischer $...

[SECURITY] Fedora 21 Update: varnish-4.0.3-3.fc21

This is Varnish Cache, a high-performance HTTP accelerator. Documentation wiki and additional information about Varnish is available on the following web site: http://www.varnish-cache.org/...

[SECURITY] Fedora 22 Update: varnish-4.0.3-3.fc22

This is Varnish Cache, a high-performance HTTP accelerator. Documentation wiki and additional information about Varnish is available on the following web site: http://www.varnish-cache.org/...

Varnish Cache 4.03 Buffer Overflow

Hi there, Latest varnish-cache 4.0.3 https://www.varnish-cache.org/ seem to have a problem with parsing HTTP responses from backend. The following example response will trigger a heap buffer overflow : -- cut -- perl -e 'print "HTTP/1.1 200 OK\r\nContent-Length: dupa" . "\n" x 15855 . "A" x 10000...