Varnish Cache vulnerabilities

2 known vulnerabilities in Varnish Cache from Varnish Cache Project. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Varnish Cache: Inconsistent Interpretation of HTTP Requests

  CVE-2022-45059Nov 9, 2022Varnish Cache ProjectEPSS 1.77%

  An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smuggling attack can be performed on Varnish Cache servers by requesting that certain headers are made hop-by-hop, preventing the Varnish Cache servers from forwarding

• 7.5 High severity

  Varnish Cache: Uncontrolled Resource Consumption

  CVE-2022-38150Aug 11, 2022Varnish Cache ProjectEPSS 1.5%

  In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to assert and automatically restart through forged HTTP/1 backend responses. An attack uses a crafted reason phrase of the backend response status line. This is fixed i