varnish-software varnish enterprise vulnerabilities and exploits

(subscribe to this query)

libvmod-digest prior to 1.0.3, as used in Varnish Enterprise 6.0.x prior to 6.0.11r5, has an out-of-bounds memory access during base64 decoding, leading to both authentication bypass and information disclosure; however, the exact attack surface will depend on the particular VCL (...

Varnish-software Vmod Digest Varnish-software Varnish Enterprise 6.0.11 Varnish-software Varnish Enterprise

In Varnish Cache prior to 6.6.2 and 7.x prior to 7.0.2, Varnish Cache 6.0 LTS prior to 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x prior to 4.1.11r6 and 6.0.x prior to 6.0.9r4, request smuggling can occur for HTTP/1 connections.

Varnish-software Varnich Cache 4.1 Varnish-software Varnich Cache Varnish Cache Project Varnish Cache Varnish-software Varnish Cache Varnish-software Varnish Cache Plus Fedoraproject Fedora 35 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0

Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a large Content-Length header for a POST request. This affects Varnish Enterprise 6.0.x prior to 6.0.8r3, and Varnish Cache 5.x and 6.x prior to 6.5.2, 6.6.x prior to 6.6.1, and 6.0 LTS ...

Varnish-cache Varnish Cache Varnish-cache Varnish Cache 6.0.8 Varnish Cache Project Varnish Cache Varnish-software Varnish Cache Fedoraproject Fedora 33 Fedoraproject Fedora 34 Debian Debian Linux 10.0 Debian Debian Linux 11.0

8 Github repositories

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook