CVE-2013-4484

Varnish Cache (varnish) is affected by CVE-2013-4484. The vulnerability lies in handling of certain GET requests with trailing whitespace and no URI, which can trigger a remote denial of service via a child-process crash and a temporary caching outage. Public reports in the connected documents in...

PT-2013-1073

Name of the Vulnerable Software and Affected Versions Varnish versions prior to 3.0.5 Description The issue allows remote attackers to cause a denial of service, leading to a child-process crash and temporary caching outage. This can be achieved via a GET request with trailing whitespace characte...

Varnish Cache server Denial Of Service

If Varnish receives a certain illegal request, and the subroutine 'vclerror' restarts the request, the varnishd worker process will crash with an assert. The varnishd management process will restart the worker process, but there will be a brief interruption of service and the cache will be emptie...

Varnish Cache Denial Of Service

Summary ======= Varnish Cache with certain configurations is vulnerable to a denial of service attack. Three lines of VCL code solves the problem. This issue was discovered by Ilia Sharov, Yandex. This has been assigned CVE-2013-4484. Details ======= If Varnish receives a certain illegal request,...

varnish -- DoS vulnerability in Varnish HTTP cache

Varnish Cache Project reports: If Varnish receives a certain illegal request, and the subroutine 'vclerror' restarts the request, the varnishd worker process will crash with an assert. The varnishd management process will restart the worker process, but there will be a brief interruption of servi...

Fedora 18 : varnish-3.0.3-5.fc18 (2013-8381)

Added macro hardenedbuild to enforce compiling with PIE - Moved ldconfig in postun script to a shell line - Corrected some bogus dates in the changelog Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

[SECURITY] Fedora 18 Update: varnish-3.0.3-5.fc18

This is Varnish Cache, a high-performance HTTP accelerator. Documentation wiki and additional information about Varnish is available on the following web site: http://www.varnish-cache.org/...

Fedora Update for varnish FEDORA-2013-8381

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for varnish FEDORA-2013-8381

Check for the Version of varnish OpenVAS Vulnerability Test Fedora Update for varnish FEDORA-2013-8381 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for varnish FEDORA-2013-8377

Check for the Version of varnish OpenVAS Vulnerability Test Fedora Update for varnish FEDORA-2013-8377 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for varnish FEDORA-2013-8377

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 19 Update: varnish-3.0.3-5.fc19

This is Varnish Cache, a high-performance HTTP accelerator. Documentation wiki and additional information about Varnish is available on the following web site: http://www.varnish-cache.org/...

[SECURITY] Fedora 17 Update: varnish-3.0.3-5.fc17

This is Varnish Cache, a high-performance HTTP accelerator. Documentation wiki and additional information about Varnish is available on the following web site: http://www.varnish-cache.org/...

Fedora 17 : varnish-3.0.3-5.fc17 (2013-8377)

Added macro hardenedbuild to enforce compiling with PIE - Moved ldconfig in postun script to a shell line - Corrected some bogus dates in the changelog Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Fedora 19 : varnish-3.0.3-5.fc19 (2013-8338)

Added macro hardenedbuild to enforce compiling with PIE - Moved ldconfig in postun script to a shell line - Corrected some bogus dates in the changelog Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Varnish Cache Detection

Binary data 6742.prm...

CVE-2013-0325

Multiple cross-site scripting XSS vulnerabilities in the Varnish module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.0-beta2 for Drupal allow remote attackers to inject arbitrary web script or HTML via crafted a 1 Watchdog message or 2 admin setting...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Varnish module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.0-beta2 for Drupal allow remote attackers to inject arbitrary web script or HTML via crafted a 1 Watchdog message or 2 admin setting...

CVE-2013-0325

Multiple cross-site scripting XSS vulnerabilities in the Varnish module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.0-beta2 for Drupal allow remote attackers to inject arbitrary web script or HTML via crafted a 1 Watchdog message or 2 admin setting...

CVE-2013-0325

The vulnerability CVE-2013-0325 affects the Varnish module for Drupal (versions 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.0-beta2). The underlying issue is cross-site scripting (XSS) via user-supplied data in module configuration (two vectors: a Watchdog message and an admin setting). Impac...