Varnish 2.1.5, 3.0.3 DoS in VRY_Create() while parsing Vary header

🗓️ 11 Mar 2013 00:00:00Reported by SecurityvulnsType

Varnish 2.1.5, 3.0.3 DoS in VRY_Create() while parsing Vary header. Vulnerability allows a DoS attack on Varnish versions 2.1.5 and 3.0.3 by crashing and restarting when parsing a Vary header in the backend response. This can be exploited if the attacker gains access to backend systems or when the backend system is not managed by the same entity as the Varnish proxy

11 Mar 2013 00:00Current

0.2Low risk

Vulners AI Score0.2

varnish dos parsing vry_create()vulnerability crash restart backend response exploit access security header version 2.1.5 version 3.0.3

Varnish 2.1.5, 3.0.3 DoS in VRY_Create&#40;&#41; while parsing Vary header

Varnish 2.1.5, 3.0.3 DoS in VRY_Create() while parsing Vary header