CVE-2020-11653
published 2020-04-08CVE-2020-11653: An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3.x before 6.3.2. It occurs when communication with a TLS…
PriorityP336high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
2.11%
79.7th percentile
An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3.x before 6.3.2. It occurs when communication with a TLS termination proxy uses PROXY version 2. There can be an assertion failure and daemon restart, which causes a performance loss.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | varnish | < varnish 6.4.0-1 (bookworm) | varnish 6.4.0-1 (bookworm) |
| opensuse | backports_sle | — | — |
| opensuse | leap | — | — |
| varnish-cache | varnish | >= 0 < 6.4.0-1 | 6.4.0-1 |
| varnish-cache | varnish | >= 0 < 6.4.0-1 | 6.4.0-1 |
| varnish-cache | varnish | >= 0 < 6.4.0-1 | 6.4.0-1 |
| varnish-cache | varnish | >= 0 < 6.4.0-1 | 6.4.0-1 |
| varnish-cache | varnish | >= 0 < 5.2.1-1ubuntu0.1 | 5.2.1-1ubuntu0.1 |
| varnish-cache | varnish | >= 0 < 6.2.1-2ubuntu0.2 | 6.2.1-2ubuntu0.2 |
| varnish-cache | varnish | >= 0 < 6.2.1-2ubuntu0.1 | 6.2.1-2ubuntu0.1 |
| varnish-cache | varnish | >= 0 < 6.6.1-1ubuntu0.2 | 6.6.1-1ubuntu0.2 |
| varnish-cache | varnish_cache | >= 6.1.0 < 6.2.3 | 6.2.3 |
| varnish-cache | varnish_cache | >= 6.3.0 < 6.3.2 | 6.3.2 |
| varnish-software | varnish_cache | >= 6.0.0 < 6.0.6 | 6.0.6 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv7.5HIGH
vendor_debian7.5HIGH
vendor_redhat7.5HIGH
vendor_ubuntu7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Varnish Cache regression
vendor_ubuntu·2022-08-23·CVSS 7.5
CVE-2020-11653 [HIGH] Varnish Cache regression
Title: Varnish Cache regression
Summary: Varnish Cache could be made to restart if it received specially crafted input.
USN-5474-1 fixed vulnerabilities in Varnish Cache. Unfortunately the fix for
CVE-2020-11653 was incomplete. This update fixes the problem.
Original advisory details:
It was discovered that Varnish Cache could have an assertion failure when a
TLS termination proxy uses PROXY version 2. A remote attacker could possibly
use this issue to restart the daemon and cause a performance loss.
(CVE-2020-11653)
Instructions: In general, a standard system update will make all the necessary changes.
Ubuntu
Varnish Cache vulnerabilities
vendor_ubuntu·2022-06-08·CVSS 7.5
CVE-2021-36740 [HIGH] Varnish Cache vulnerabilities
Title: Varnish Cache vulnerabilities
Summary: Several security issues were fixed in Varnish Cache.
It was dicovered that Varnish Cache did not clear a pointer between the
handling of one client request and the next request within the same connection.
A remote attacker could possibly use this issue to obtain sensitive
information. (CVE-2019-20637)
It was discovered that Varnish Cache could have an assertion failure when a
TLS termination proxy uses PROXY version 2. A remote attacker could possibly
use this issue to restart the daemon and cause a performance loss.
(CVE-2020-11653)
It was discovered that Varnish Cache allowed request smuggling and VCL
authorization bypass via a large Content-Length header for a POST
request. A remote attacker could possibly use this issue to obtain sensit
Red Hat
varnish: remote clients may cause Varnish to assert and restart which could result in DoS
vendor_redhat·2020-02-04·CVSS 7.5
CVE-2020-11653 [HIGH] CWE-400 varnish: remote clients may cause Varnish to assert and restart which could result in DoS
varnish: remote clients may cause Varnish to assert and restart which could result in DoS
An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3.x before 6.3.2. It occurs when communication with a TLS termination proxy uses PROXY version 2. There can be an assertion failure and daemon restart, which causes a performance loss.
Mitigation: An user can mitigate the problem by setting the proxy protocol to version 1 on the TLS Proxy side, as this flaw only affects the proxy protocol version 2.
Package: rh-varnish5-varnish (Red Hat Software Collections) - Will not fix
Package: rh-varnish6-varnish (Red Hat Software Collections) - Affected
Debian
CVE-2020-11653: varnish - An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x befor...
vendor_debian·2020·CVSS 7.5
CVE-2020-11653 [HIGH] CVE-2020-11653: varnish - An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x befor...
An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3.x before 6.3.2. It occurs when communication with a TLS termination proxy uses PROXY version 2. There can be an assertion failure and daemon restart, which causes a performance loss.
Scope: local
bookworm: resolved (fixed in 6.4.0-1)
bullseye: resolved (fixed in 6.4.0-1)
forky: resolved (fixed in 6.4.0-1)
sid: resolved (fixed in 6.4.0-1)
trixie: resolved (fixed in 6.4.0-1)
OSV
varnish regression
osv·2022-08-23·CVSS 7.5
CVE-2020-11653 [HIGH] varnish regression
varnish regression
USN-5474-1 fixed vulnerabilities in Varnish Cache. Unfortunately the fix for
CVE-2020-11653 was incomplete. This update fixes the problem.
Original advisory details:
It was discovered that Varnish Cache could have an assertion failure when a
TLS termination proxy uses PROXY version 2. A remote attacker could possibly
use this issue to restart the daemon and cause a performance loss.
(CVE-2020-11653)
OSV
varnish vulnerabilities
osv·2022-06-08·CVSS 7.5
CVE-2019-20637 [HIGH] varnish vulnerabilities
varnish vulnerabilities
It was dicovered that Varnish Cache did not clear a pointer between the
handling of one client request and the next request within the same connection.
A remote attacker could possibly use this issue to obtain sensitive
information. (CVE-2019-20637)
It was discovered that Varnish Cache could have an assertion failure when a
TLS termination proxy uses PROXY version 2. A remote attacker could possibly
use this issue to restart the daemon and cause a performance loss.
(CVE-2020-11653)
It was discovered that Varnish Cache allowed request smuggling and VCL
authorization bypass via a large Content-Length header for a POST
request. A remote attacker could possibly use this issue to obtain sensitive
information. (CVE-2021-36740)
It was discovered that Varnish Cache allo
GHSA
GHSA-jg36-89rw-qgr3: An issue was discovered in Varnish Cache before 6
ghsa_unreviewed·2022-05-24
CVE-2020-11653 [MEDIUM] CWE-20 GHSA-jg36-89rw-qgr3: An issue was discovered in Varnish Cache before 6
An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3.x before 6.3.2. It occurs when communication with a TLS termination proxy uses PROXY version 2. There can be an assertion failure and daemon restart, which causes a performance loss.
OSV
CVE-2020-11653: An issue was discovered in Varnish Cache before 6
osv·2020-04-08·CVSS 7.5
CVE-2020-11653 [HIGH] CVE-2020-11653: An issue was discovered in Varnish Cache before 6
An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3.x before 6.3.2. It occurs when communication with a TLS termination proxy uses PROXY version 2. There can be an assertion failure and daemon restart, which causes a performance loss.
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00026.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-06/msg00031.htmlhttps://lists.debian.org/debian-lts-announce/2022/11/msg00036.htmlhttps://varnish-cache.org/security/VSV00005.html#vsv00005http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00026.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-06/msg00031.htmlhttps://lists.debian.org/debian-lts-announce/2022/11/msg00036.htmlhttps://varnish-cache.org/security/VSV00005.html#vsv00005
2020-04-08
Published