| ID |
CVE-2019-15892
|
| Summary |
An issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x and 6.2.x before 6.2.1. An HTTP/1 parsing failure allows a remote attacker to trigger an assert by sending crafted HTTP/1 requests. The assert will cause an automatic restart with a clean cache, which makes it a Denial of Service attack. |
| References |
|
| Vulnerable Configurations |
-
cpe:2.3:a:varnish_cache_project:varnish_cache:6.2.0:*:*:*:*:*:*:*
cpe:2.3:a:varnish_cache_project:varnish_cache:6.2.0:*:*:*:*:*:*:*
-
cpe:2.3:a:varnish_cache_project:varnish_cache:6.1.0:*:*:*:*:*:*:*
cpe:2.3:a:varnish_cache_project:varnish_cache:6.1.0:*:*:*:*:*:*:*
-
cpe:2.3:a:varnish_cache_project:varnish_cache:6.1.1:*:*:*:*:*:*:*
cpe:2.3:a:varnish_cache_project:varnish_cache:6.1.1:*:*:*:*:*:*:*
-
cpe:2.3:a:varnish-software:varnish_cache:6.0.0:*:*:*:lts:*:*:*
cpe:2.3:a:varnish-software:varnish_cache:6.0.0:*:*:*:lts:*:*:*
-
cpe:2.3:a:varnish-software:varnish_cache:6.0.1:*:*:*:lts:*:*:*
cpe:2.3:a:varnish-software:varnish_cache:6.0.1:*:*:*:lts:*:*:*
-
cpe:2.3:a:varnish-software:varnish_cache:6.0.2:*:*:*:lts:*:*:*
cpe:2.3:a:varnish-software:varnish_cache:6.0.2:*:*:*:lts:*:*:*
-
cpe:2.3:a:varnish-software:varnish_cache:6.0.3:*:*:*:lts:*:*:*
cpe:2.3:a:varnish-software:varnish_cache:6.0.3:*:*:*:lts:*:*:*
-
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
|
| CVSS |
| Base: | 7.8 (as of 02-08-2022 - 19:00) |
| Impact: | |
| Exploitability: | |
|
| CWE |
CWE-617 |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
LOW |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| NONE |
NONE |
COMPLETE |
|
| cvss-vector
via4
|
AV:N/AC:L/Au:N/C:N/I:N/A:C
|
| redhat
via4
|
| rpms | - varnish-0:6.0.6-2.module+el8.3.0+6843+b3b42fcc
- varnish-devel-0:6.0.6-2.module+el8.3.0+6843+b3b42fcc
- varnish-docs-0:6.0.6-2.module+el8.3.0+6843+b3b42fcc
- varnish-modules-0:0.15.0-5.module+el8.3.0+6843+b3b42fcc
- varnish-modules-debuginfo-0:0.15.0-5.module+el8.3.0+6843+b3b42fcc
- varnish-modules-debugsource-0:0.15.0-5.module+el8.3.0+6843+b3b42fcc
|
|
| refmap
via4
|
| bugtraq | 20190904 [SECURITY] [DSA 4514-1] varnish security update | | debian | DSA-4514 | | fedora | - FEDORA-2019-8a85a90af6
- FEDORA-2019-a0a0cdef92
- FEDORA-2019-feec5e0afd
| | misc | https://varnish-cache.org/security/VSV00003.html | | suse | - openSUSE-SU-2019:2184
- openSUSE-SU-2019:2221
|
|
| Last major update |
02-08-2022 - 19:00 |
| Published |
03-09-2019 - 21:15 |
| Last modified |
02-08-2022 - 19:00 |
