vulnerability
SUSE: CVE-2015-8852: SUSE Linux Security Advisory
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:L/Au:N/C:N/I:P/A:N) | Apr 25, 2016 | May 17, 2016 | May 3, 2019 |
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:P/A:N)
Published
Apr 25, 2016
Added
May 17, 2016
Modified
May 3, 2019
Description
Varnish 3.x before 3.0.7, when used in certain stacked installations, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a header line terminated by a \r (carriage return) character in conjunction with multiple Content-Length headers in an HTTP request.
Solution(s)
suse-upgrade-libvarnishapi1suse-upgrade-libvarnishapi1-debuginfosuse-upgrade-varnishsuse-upgrade-varnish-debuginfosuse-upgrade-varnish-debugsourcesuse-upgrade-varnish-devel
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.