Lucene search
GoogleOSV:DSA-3553-1HistoryApr 22, 2016 - 12:00 a.m.
varnish - security update
2016-04-2200:00:00
Google
osv.dev
10
0.008 Low
EPSS
Percentile
81.9%
RĂŠgis Leroy from Makina Corpus discovered that varnish, a caching HTTP
reverse proxy, is vulnerable to HTTP smuggling issues, potentially
resulting in cache poisoning or bypassing of access control policies.
For the oldstable distribution (wheezy), this problem has been fixed
in version 3.0.2-2+deb7u2.
We recommend that you upgrade your varnish packages.
| CPE | Name | Operator | Version |
|---|---|---|---|
| varnish | eq | 3.0.2-2 | |
| varnish | eq | 3.0.2-2+deb7u1 |
References
Related
nessus
nessus
Debian DSA-3553-1 : varnish - security update
2016-04-25 00:00:00
GLSA-201607-10 : Varnish: Multiple vulnerabilities
2016-07-21 00:00:00
openSUSE Security Update : varnish (openSUSE-2016-588)
2016-05-18 00:00:00
cvelist
cvelist
CVE-2015-8852
2016-04-25 14:00:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2016-721)
2016-10-26 00:00:00
Debian Security Advisory DSA 3553-1 (varnish - security update)
2016-04-22 00:00:00
Mageia: Security Advisory (MGASA-2016-0150)
2016-05-09 00:00:00
ubuntucve
ubuntucve
CVE-2015-8852
2016-04-25 00:00:00
cve
cve
CVE-2015-8852
2016-04-25 14:59:01
debian
debian
[SECURITY] [DSA 3553-1] varnish security update
2016-04-22 07:34:25
[SECURITY] [DSA 3553-1] varnish security update
2016-04-22 07:34:25
mageia
mageia
Updated varnish packages fix CVE-2015-8852
2016-04-25 10:57:21
nvd
nvd
CVE-2015-8852
2016-04-25 14:59:01
debiancve
debiancve
CVE-2015-8852
2016-04-25 14:59:01
gentoo
gentoo
Varnish: Multiple vulnerabilities
2016-07-20 00:00:00
prion
prion
Cross site request forgery (csrf)
2016-04-25 14:59:00
amazon
amazon
Important: varnish
2016-07-14 16:30:00
hackerone
hackerone
Internet Bug Bounty: Apache HTTP Request Parsing Whitespace Defects
2017-06-29 17:41:22
Internet Bug Bounty: Multiple HTTP Smuggling reports
2019-07-17 22:47:10