ALPINE-CVE-2022-23959
ALPINE-CVE-2022-23959
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x before 4.1.11r6 and 6.0.x before 6.0.9r4, request smuggling can occur for HTTP/1 connections.
CVSS 9.1 · Critical · Fix available
- Published
- Updated
Stack: system
Affected products and versions
varnish Alpine:v3.12
- Affected ranges
- ECOSYSTEM: < 6.5.2-r1
Update to 6.5.2-r1
varnish Alpine:v3.13
- Affected ranges
- ECOSYSTEM: < 6.5.2-r1
Update to 6.5.2-r1
varnish Alpine:v3.14
- Affected ranges
- ECOSYSTEM: < 6.6.2-r0
Update to 6.6.2-r0
varnish Alpine:v3.15
- Affected ranges
- ECOSYSTEM: < 7.0.2-r0
Update to 7.0.2-r0
varnish Alpine:v3.16
- Affected ranges
- ECOSYSTEM: < 7.0.2-r0
Update to 7.0.2-r0
varnish Alpine:v3.17
- Affected ranges
- ECOSYSTEM: < 7.0.2-r0
Update to 7.0.2-r0
varnish Alpine:v3.18
- Affected ranges
- ECOSYSTEM: < 7.0.2-r0
Update to 7.0.2-r0
varnish Alpine:v3.19
- Affected ranges
- ECOSYSTEM: < 7.0.2-r0
Update to 7.0.2-r0
varnish Alpine:v3.20
- Affected ranges
- ECOSYSTEM: < 7.0.2-r0
Update to 7.0.2-r0
varnish Alpine:v3.21
- Affected ranges
- ECOSYSTEM: < 7.0.2-r0
Update to 7.0.2-r0
varnish Alpine:v3.22
- Affected ranges
- ECOSYSTEM: < 7.0.2-r0
Update to 7.0.2-r0
varnish Alpine:v3.23
- Affected ranges
- ECOSYSTEM: < 7.0.2-r0
Update to 7.0.2-r0
varnish Alpine:v3.24
- Affected ranges
- ECOSYSTEM: < 7.0.2-r0
Update to 7.0.2-r0