Varnish before 3.0.5 allows remote attackers to cause a denial of service (child-process crash and temporary caching outage) via a GET request with trailing whitespace characters and no URI.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:55
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://archives.neohapsis.com/archives/bugtraq/2013-10/0158.html - | |
| References | () http://lists.opensuse.org/opensuse-updates/2013-11/msg00029.html - | |
| References | () http://lists.opensuse.org/opensuse-updates/2013-11/msg00033.html - | |
| References | () http://secunia.com/advisories/55452 - | |
| References | () http://secunia.com/advisories/55746 - | |
| References | () http://www.debian.org/security/2012/dsa-2814 - | |
| References | () http://www.openwall.com/lists/oss-security/2013/10/30/5 - | |
| References | () https://www.varnish-cache.org/trac/ticket/1367 - Exploit, Patch |
02 Aug 2022, 16:29
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:varnish-cache:varnish_cache:3.0.2:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:2.0.2:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:2.1.0:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:2.0.1:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:3.0.3:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:2.1.3:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:2.1.4:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:2.0.6:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:2.1.1:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:2.0.3:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:2.0.5:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:2.1.2:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:2.0.4:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:3.0.0:beta1:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:2.1.5:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:*:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:3.0.1:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:3.0.0:beta2:*:*:*:*:*:* |
cpe:2.3:a:varnish_cache_project:varnish_cache:3.0.0:*:*:*:*:*:*:* cpe:2.3:a:varnish_cache_project:varnish_cache:2.0.6:*:*:*:*:*:*:* cpe:2.3:a:varnish_cache_project:varnish_cache:3.0.0:beta1:*:*:*:*:*:* cpe:2.3:a:varnish_cache_project:varnish_cache:2.1.4:*:*:*:*:*:*:* cpe:2.3:a:varnish_cache_project:varnish_cache:3.0.1:*:*:*:*:*:*:* cpe:2.3:a:varnish_cache_project:varnish_cache:*:*:*:*:*:*:*:* cpe:2.3:a:varnish_cache_project:varnish_cache:3.0.0:beta2:*:*:*:*:*:* cpe:2.3:a:varnish_cache_project:varnish_cache:2.0.3:*:*:*:*:*:*:* cpe:2.3:a:varnish_cache_project:varnish_cache:2.0.4:*:*:*:*:*:*:* cpe:2.3:a:varnish_cache_project:varnish_cache:2.1.5:*:*:*:*:*:*:* cpe:2.3:a:varnish_cache_project:varnish_cache:2.1.3:*:*:*:*:*:*:* cpe:2.3:a:varnish_cache_project:varnish_cache:2.0.5:*:*:*:*:*:*:* cpe:2.3:a:varnish_cache_project:varnish_cache:2.0.1:*:*:*:*:*:*:* cpe:2.3:a:varnish_cache_project:varnish_cache:2.0.2:*:*:*:*:*:*:* cpe:2.3:a:varnish_cache_project:varnish_cache:3.0.2:*:*:*:*:*:*:* cpe:2.3:a:varnish_cache_project:varnish_cache:2.1.2:*:*:*:*:*:*:* cpe:2.3:a:varnish_cache_project:varnish_cache:3.0.3:*:*:*:*:*:*:* cpe:2.3:a:varnish_cache_project:varnish_cache:2.1.1:*:*:*:*:*:*:* cpe:2.3:a:varnish_cache_project:varnish_cache:2.1.0:*:*:*:*:*:*:* |
21 Jun 2022, 17:02
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:varnish-cache:varnish:3.0.1:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish:2.1.2:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish:2.1.5:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish:2.0.1:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish:3.0.2:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish:3.0.0:beta1:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish:3.0.0:beta2:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish:2.0.5:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish:3.0.3:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish:2.1.4:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish:2.1.1:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish:2.0.3:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish:*:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish:2.0.2:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish:2.0.4:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish:2.0.6:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish:3.0.0:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish:2.1.3:*:*:*:*:*:*:* |
cpe:2.3:a:varnish-cache:varnish_cache:3.0.0:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:3.0.2:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:2.0.2:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:2.1.0:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:2.0.1:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:3.0.3:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:2.1.3:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:2.1.4:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:2.0.6:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:2.1.1:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:2.0.3:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:2.0.5:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:2.1.2:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:2.0.4:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:3.0.0:beta1:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:2.1.5:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:*:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:3.0.1:*:*:*:*:*:*:* cpe:2.3:a:varnish-cache:varnish_cache:3.0.0:beta2:*:*:*:*:*:* |
Information
Published : 2013-11-01 02:55
Updated : 2025-04-11 00:51
NVD link : CVE-2013-4484
Mitre link : CVE-2013-4484
CVE.ORG link : CVE-2013-4484
JSON object : View
Products Affected
varnish_cache_project
- varnish_cache
varnish-cache
- varnish
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer