Martin Blix Grydeland

3 exploits Active since Apr 2016
CVE-2015-8852 WRITEUP HIGH WRITEUP
Varnish 3.x <3.0.7 - HTTP Response Splitting
Varnish 3.x before 3.0.7, when used in certain stacked installations, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a header line terminated by a \r (carriage return) character in conjunction with multiple Content-Length headers in an HTTP request.
CVSS 7.5
CVE-2021-36740 WRITEUP MEDIUM WRITEUP
Varnish-cache Varnish Cache < 6.0.8 - HTTP Request Smuggling
Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a large Content-Length header for a POST request. This affects Varnish Enterprise 6.0.x before 6.0.8r3, and Varnish Cache 5.x and 6.x before 6.5.2, 6.6.x before 6.6.1, and 6.0 LTS before 6.0.8.
CVSS 6.5
CVE-2017-8807 WRITEUP CRITICAL WRITEUP
Varnish HTTP Cache 4.1.x < 4.1.9 and 5.x < 5.2.1 - Information Disclosure via VFP_GetStorage Buffer Handling
vbf_stp_error in bin/varnishd/cache/cache_fetch.c in Varnish HTTP Cache 4.1.x before 4.1.9 and 5.x before 5.2.1 allows remote attackers to obtain sensitive information from process memory because a VFP_GetStorage buffer is larger than intended in certain circumstances involving -sfile Stevedore transient objects.
CVSS 9.1