CVE-2019-20637
CVE-2019-20637
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue was discovered in Varnish Cache before 6.0.5 LTS, 6.1.x and 6.2.x before 6.2.2, and 6.3.x before 6.3.1. It does not clear a pointer between the handling of one client request and the next request within the same connection. This sometimes causes information to be disclosed from the connection workspace, such as data structures associated with previous requests within this connection or VCL-related temporary headers.
CVSS 7.5 · High · EPSS 1.8% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
varnish Debian:12
- Affected ranges
- ECOSYSTEM: < 6.4.0-1
Update to 6.4.0-1
varnish Debian:13
- Affected ranges
- ECOSYSTEM: < 6.4.0-1
Update to 6.4.0-1
varnish Ubuntu:18.04:LTS
- Versions
- 5.0.0-7.1
- 5.2.1-1
- Affected ranges
- ECOSYSTEM: < 5.2.1-1ubuntu0.1
Update to 5.2.1-1ubuntu0.1
varnish Ubuntu:20.04:LTS
- Versions
- 6.1.1-1
- 6.2.1-2
- Affected ranges
- ECOSYSTEM: < 6.2.1-2ubuntu0.1
Update to 6.2.1-2ubuntu0.1