Lucene search
Veracode Vulnerability DatabaseVERACODE:33955HistoryJan 29, 2022 - 5:51 p.m.
HTTP Request Smuggling (HRS)
2022-01-2917:51:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
varnish
http request smuggling
vulnerability
lack of sanitization
http/1 connections
software
EPSS
0.005
Percentile
77.6%
varnish is vulnerable to HTTP request smuggling. The vulnerability exists due to a lack of sanitization in the HTTP/1 connections.
References
docs.varnish-software.com/security/VSV00008/
lists.debian.org/debian-lts-announce/2022/02/msg00014.html
lists.fedoraproject.org/archives/list/[email protected]/message/UMMDMQWNAE3BTSZUHXQHVAMZC5TLHLYT/
secdb.alpinelinux.org/edge/main.yaml
varnish-cache.org/security/VSV00008.html
www.debian.org/security/2022/dsa-5088
Related
prion
prion
Design/Logic Flaw
2022-01-26 01:15:00
openvas
openvas
Fedora: Security Advisory for varnish (FEDORA-2022-2f14ec7663)
2022-02-16 00:00:00
Mageia: Security Advisory (MGASA-2022-0079)
2022-02-23 00:00:00
Fedora: Security Advisory for varnish-modules (FEDORA-2022-2f14ec7663)
2022-02-16 00:00:00
redhatcve
redhatcve
CVE-2022-23959
2022-01-27 13:58:04
nessus
nessus
CentOS 8 : varnish:6 (CESA-2022:0418)
2022-02-04 00:00:00
RHEL 8 : varnish:6 (RHSA-2022:0420)
2022-02-03 00:00:00
RHEL 8 : varnish:6 (RHSA-2022:0418)
2022-02-04 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: varnish-modules-0.18.0-5.fc35
2022-02-16 01:28:31
[SECURITY] Fedora 35 Update: varnish-6.6.2-2.fc35
2022-02-16 01:28:31
nvd
nvd
CVE-2022-23959
2022-01-26 01:15:07
osv
osv
Important: varnish:6 security update
2022-02-03 09:29:24
varnish - security update
2022-02-14 00:00:00
BIT-varnish-2022-23959
2024-03-06 11:08:25
mageia
mageia
Updated varnish packages fix security vulnerability
2022-02-22 23:15:16
freebsd
freebsd
varnish -- Request Smuggling Vulnerability
2022-01-25 00:00:00
cve
cve
CVE-2022-23959
2022-01-26 01:15:07
debiancve
debiancve
CVE-2022-23959
2022-01-26 01:15:07
oraclelinux
oraclelinux
varnish:6 security update
2022-02-03 00:00:00
debian
debian
[SECURITY] [DLA 2920-1] varnish security update
2022-02-14 00:33:52
[SECURITY] [DSA 5088-1] varnish security update
2022-03-03 19:50:31
almalinux
almalinux
Important: varnish:6 security update
2022-02-03 09:29:24
redhat
redhat
(RHSA-2022:0422) Important: varnish:6 security update
2022-02-03 11:48:12
(RHSA-2022:0418) Important: varnish:6 security update
2022-02-03 09:29:24
(RHSA-2022:4745) Important: rh-varnish6-varnish security update
2022-05-25 07:44:36
ubuntucve
ubuntucve
CVE-2022-23959
2022-01-26 00:00:00
amazon
amazon
Important: varnish
2022-08-15 18:37:00
rocky
rocky
varnish:6 security update
2022-02-03 09:29:24
cvelist
cvelist
CVE-2022-23959
2022-01-26 00:38:55
alpinelinux
alpinelinux
CVE-2022-23959
2022-01-26 01:15:07
suse
suse
Security update for varnish (moderate)
2022-06-15 00:00:00
Security update for varnish (important)
2022-05-27 00:00:00
ubuntu
ubuntu
Varnish Cache vulnerabilities
2022-06-08 00:00:00