Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2022-38150HistoryAug 11, 2022 - 1:15 a.m.
CVE-2022-38150
2022-08-1101:15:10
Debian Security Bug Tracker
security-tracker.debian.org
28
cve-2022-38150
varnish cache
http responses
backend server
security patch
unix
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.002
Percentile
51.7%
In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to assert and automatically restart through forged HTTP/1 backend responses. An attack uses a crafted reason phrase of the backend response status line. This is fixed in 7.0.3 and 7.1.1.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | varnish | < 7.1.1-1 | varnish_7.1.1-1_all.deb |
| Debian | 11 | all | varnish | < 6.5.1-1+deb11u3 | varnish_6.5.1-1+deb11u3_all.deb |
| Debian | 999 | all | varnish | < 7.1.1-1 | varnish_7.1.1-1_all.deb |
| Debian | 13 | all | varnish | < 7.1.1-1 | varnish_7.1.1-1_all.deb |
Related
osv
osv
CVE-2022-38150
2022-08-11 01:15:10
BIT-varnish-2022-38150
2024-03-06 11:08:14
cve
cve
CVE-2022-38150
2022-08-11 01:15:10
ubuntucve
ubuntucve
CVE-2022-38150
2022-08-11 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: varnish-modules-0.19.0-5.fc36
2022-08-30 09:06:12
[SECURITY] Fedora 36 Update: varnish-7.0.3-1.fc36
2022-08-22 01:11:29
[SECURITY] Fedora 35 Update: varnish-6.6.2-3.fc35
2022-11-26 00:46:29
suse
suse
Security update for varnish (important)
2022-08-27 00:00:00
nvd
nvd
CVE-2022-38150
2022-08-11 01:15:10
veracode
veracode
Denial Of Service (DoS)
2022-08-20 13:02:03
alpinelinux
alpinelinux
CVE-2022-38150
2022-08-11 01:15:10
prion
prion
Design/Logic Flaw
2022-08-11 01:15:00
cvelist
cvelist
CVE-2022-38150
2022-08-11 00:00:00
openvas
openvas
Fedora: Security Advisory for varnish-modules (FEDORA-2022-99702d9bdd)
2022-08-31 00:00:00
openSUSE: Security Advisory for varnish (openSUSE-SU-2022:10104-1)
2024-03-04 00:00:00
Fedora: Security Advisory for varnish (FEDORA-2022-1fa6d1ed2f)
2022-08-24 00:00:00
redhatcve
redhatcve
CVE-2022-38150
2022-08-11 16:07:22
nessus
nessus
openSUSE 15 Security Update : varnish (openSUSE-SU-2022:10104-1)
2022-08-28 00:00:00
Fedora 35 : varnish (2022-99c5ddb2ae)
2022-12-22 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.002
Percentile
51.7%
Related for DEBIANCVE:CVE-2022-38150