Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-11653

Опубликовано: 08 апр. 2020
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3.x before 6.3.2. It occurs when communication with a TLS termination proxy uses PROXY version 2. There can be an assertion failure and daemon restart, which causes a performance loss.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:varnish-cache:varnish_cache:*:*:*:*:-:*:*:*
Версия от 6.1.0 (включая) до 6.2.3 (исключая)
cpe:2.3:a:varnish-cache:varnish_cache:*:*:*:*:-:*:*:*
Версия от 6.3.0 (включая) до 6.3.2 (исключая)
cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:lts:*:*:*
Версия от 6.0.0 (включая) до 6.0.6 (исключая)
Конфигурация 2

Одно из

cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
Конфигурация 3
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 79%
0.0126
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-617

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 5 лет назад

An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3.x before 6.3.2. It occurs when communication with a TLS termination proxy uses PROXY version 2. There can be an assertion failure and daemon restart, which causes a performance loss.

CVSS3: 7.5
redhat
почти 6 лет назад

An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3.x before 6.3.2. It occurs when communication with a TLS termination proxy uses PROXY version 2. There can be an assertion failure and daemon restart, which causes a performance loss.

CVSS3: 7.5
debian
больше 5 лет назад

An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6 ...

CVSS3: 7.5
github
больше 3 лет назад

An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3.x before 6.3.2. It occurs when communication with a TLS termination proxy uses PROXY version 2. There can be an assertion failure and daemon restart, which causes a performance loss.

suse-cvrf
больше 5 лет назад

Security update for varnish

EPSS

Процентиль: 79%
0.0126
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-617