The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x and 6.2.x before 6.2.1. An HTTP/1 parsing failure allows a remote attacker to trigger an assert by sending crafted HTTP/1 requests. The assert will cause an automatic restart with a clean cache, which makes it a Denial of Service attack.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade varnish-modulesUpgrade varnishUpgrade varnish-docsUpgrade varnish-devel | May 4, 2022 | Sep 3, 2019 |
| Alpine Linux | — | Upgrade varnish | Nov 8, 2019 | Sep 3, 2019 |
| Centos_linux | — | Upgrade varnish-modules-debuginfoUpgrade varnish-modules-debugsourceUpgrade varnish-modulesUpgrade varnishUpgrade varnish-docsUpgrade varnish-devel | Nov 5, 2020 | Sep 3, 2019 |
| Debian | — | Upgrade varnish | Sep 5, 2019 | Sep 3, 2019 |
| Oracle_linux | — | Upgrade varnishUpgrade varnish-modulesUpgrade varnish-develUpgrade varnish-docs | Nov 12, 2020 | Sep 3, 2019 |
| Redhat_linux | — | Upgrade varnish-modulesUpgrade varnishUpgrade varnish-modules-debugsourceUpgrade varnish-modules-debuginfoUpgrade varnish-docsUpgrade varnish-devel | Nov 5, 2020 | Sep 3, 2019 |
| Rocky_linux | — | Upgrade varnish-modules-debuginfoUpgrade varnish-develUpgrade varnish-docsUpgrade varnishUpgrade varnish-modules-debugsourceUpgrade varnish-modules | Mar 12, 2024 | Sep 3, 2019 |
| Suse | — | Upgrade varnish-develUpgrade libvarnishapi2Upgrade varnish | Sep 26, 2019 | Sep 3, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub