CVE-2013-4484

Varnish < 3.0.5 - Denial of Service via GET Request with Trailing Whitespace

Title source: llm
STIX 2.1

Description

Varnish before 3.0.5 allows remote attackers to cause a denial of service (child-process crash and temporary caching outage) via a GET request with trailing whitespace characters and no URI.

References (8)

Core 8
Core References
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2013-11/msg00029.html
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2012/dsa-2814
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2013/10/30/5
Third Party Advisory mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2013-10/0158.html
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2013-11/msg00033.html
Exploit, Patch x_refsource_confirm
https://www.varnish-cache.org/trac/ticket/1367
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/55746
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/55452

Scores

EPSS 0.0305
EPSS Percentile 86.0%

Details

CWE
CWE-119
Status published
Products (18)
varnish-cache/varnish 2.0.0
varnish_cache_project/varnish_cache 2.0.1
varnish_cache_project/varnish_cache 2.0.2
varnish_cache_project/varnish_cache 2.0.3
varnish_cache_project/varnish_cache 2.0.4
varnish_cache_project/varnish_cache 2.0.5
varnish_cache_project/varnish_cache 2.0.6
varnish_cache_project/varnish_cache 2.1.0
varnish_cache_project/varnish_cache 2.1.1
varnish_cache_project/varnish_cache 2.1.2
... and 8 more
Published Nov 01, 2013
Tracked Since Feb 18, 2026