Lucene search
Ubuntu.comUB:CVE-2022-38150HistoryAug 11, 2022 - 12:00 a.m.
CVE-2022-38150
2022-08-1100:00:00
ubuntu.com
ubuntu.com
27
varnish cache
http/1
backend response
forged
cause
assert
restart
fixed
version 7.0.3
version 7.1.1
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.002
Percentile
51.7%
In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause
the Varnish Server to assert and automatically restart through forged
HTTP/1 backend responses. An attack uses a crafted reason phrase of the
backend response status line. This is fixed in 7.0.3 and 7.1.1.
Notes
| Author | Note |
|---|---|
| mdeslaur | only affects 7.0 and higher |
Related
osv
osv
CVE-2022-38150
2022-08-11 01:15:10
BIT-varnish-2022-38150
2024-03-06 11:08:14
cve
cve
CVE-2022-38150
2022-08-11 01:15:10
fedora
fedora
[SECURITY] Fedora 36 Update: varnish-modules-0.19.0-5.fc36
2022-08-30 09:06:12
[SECURITY] Fedora 36 Update: varnish-7.0.3-1.fc36
2022-08-22 01:11:29
[SECURITY] Fedora 35 Update: varnish-6.6.2-3.fc35
2022-11-26 00:46:29
suse
suse
Security update for varnish (important)
2022-08-27 00:00:00
cvelist
cvelist
CVE-2022-38150
2022-08-11 00:00:00
openvas
openvas
Fedora: Security Advisory for varnish-modules (FEDORA-2022-99702d9bdd)
2022-08-31 00:00:00
openSUSE: Security Advisory for varnish (openSUSE-SU-2022:10104-1)
2024-03-04 00:00:00
Fedora: Security Advisory for varnish (FEDORA-2022-1fa6d1ed2f)
2022-08-24 00:00:00
redhatcve
redhatcve
CVE-2022-38150
2022-08-11 16:07:22
nvd
nvd
CVE-2022-38150
2022-08-11 01:15:10
debiancve
debiancve
CVE-2022-38150
2022-08-11 01:15:10
veracode
veracode
Denial Of Service (DoS)
2022-08-20 13:02:03
alpinelinux
alpinelinux
CVE-2022-38150
2022-08-11 01:15:10
prion
prion
Design/Logic Flaw
2022-08-11 01:15:00
nessus
nessus
openSUSE 15 Security Update : varnish (openSUSE-SU-2022:10104-1)
2022-08-28 00:00:00
Fedora 35 : varnish (2022-99c5ddb2ae)
2022-12-22 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.002
Percentile
51.7%
Related for UB:CVE-2022-38150