Lucene search
Veracode Vulnerability DatabaseVERACODE:31248HistoryJul 19, 2021 - 12:55 a.m.
Authorization Bypass
2021-07-1900:55:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
varnish
authorization bypass
request smuggling
content-length header
EPSS
0.007
Percentile
79.9%
varnish is vulnerable to authorization bypass. The application allows request smuggling and VCL authorization bypass via a large Content-Length header for a POST request.
References
docs.varnish-software.com/security/VSV00007/
github.com/varnishcache/varnish-cache/commit/82b0a629f60136e76112c6f2c6372cce77b683be
github.com/varnishcache/varnish-cache/commit/9be22198e258d0e7a5c41f4291792214a29405cf
lists.fedoraproject.org/archives/list/[email protected]/message/THV2DQA2GS65HUCKK4KSD2XLN3AAQ2V5/
lists.fedoraproject.org/archives/list/[email protected]/message/ZHBNLDEOTGYRIEQZBWV7F6VPYS4O2AAK/
secdb.alpinelinux.org/edge/main.yaml
varnish-cache.org/security/VSV00007.html
www.debian.org/security/2022/dsa-5088
Related
nessus
nessus
RHEL 7 : rh-varnish6-varnish (RHSA-2021:2993)
2021-08-09 00:00:00
Oracle Linux 8 : varnish:6 (ELSA-2021-2988)
2021-08-03 00:00:00
CentOS 9 : varnish-6.5.2-2.el9
2024-02-29 00:00:00
almalinux
almalinux
Important: varnish:6 security update
2021-08-02 14:30:38
mageia
mageia
Updated varnish packages fix a security vulnerability
2021-07-28 23:00:51
ubuntucve
ubuntucve
CVE-2021-36740
2021-07-14 00:00:00
redhat
redhat
(RHSA-2021:2988) Important: varnish:6 security update
2021-08-02 14:30:38
(RHSA-2021:2993) Important: rh-varnish6-varnish security update
2021-08-03 08:11:12
fedora
fedora
[SECURITY] Fedora 34 Update: varnish-modules-0.17.1-2.fc34
2021-07-25 01:03:43
[SECURITY] Fedora 34 Update: varnish-6.5.2-1.fc34
2021-07-25 01:03:42
[SECURITY] Fedora 34 Update: vmod-uuid-1.8-4.fc34
2021-07-25 01:03:43
cve
cve
CVE-2021-36740
2021-07-14 17:15:08
openvas
openvas
Fedora: Security Advisory for vmod-uuid (FEDORA-2021-cf7585f0ca)
2021-07-27 00:00:00
Fedora: Security Advisory for varnish (FEDORA-2021-cf7585f0ca)
2021-07-27 00:00:00
Fedora: Security Advisory for varnish (FEDORA-2021-36e10d3f9f)
2021-07-27 00:00:00
redhatcve
redhatcve
CVE-2021-36740
2021-07-14 19:25:13
osv
osv
CVE-2021-36740
2021-07-14 17:15:08
Important: varnish:6 security update
2021-08-02 14:30:38
BIT-varnish-2021-36740
2024-03-06 11:08:33
rocky
rocky
varnish:6 security update
2021-08-02 14:30:38
archlinux
archlinux
[ASA-202107-28] varnish: url request injection
2021-07-14 00:00:00
prion
prion
Authorization
2021-07-14 17:15:00
oraclelinux
oraclelinux
varnish:6 security update
2021-08-03 00:00:00
nvd
nvd
CVE-2021-36740
2021-07-14 17:15:08
alpinelinux
alpinelinux
CVE-2021-36740
2021-07-14 17:15:08
debiancve
debiancve
CVE-2021-36740
2021-07-14 17:15:08
cvelist
cvelist
CVE-2021-36740
2021-07-14 16:07:28
debian
debian
[SECURITY] [DSA 5088-1] varnish security update
2022-03-03 19:50:31
suse
suse
Security update for varnish (important)
2022-05-27 00:00:00
ubuntu
ubuntu
Varnish Cache vulnerabilities
2022-06-08 00:00:00