p PatchFirst

CVE-2020-11653

CVE-2020-11653

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3.x before 6.3.2. It occurs when communication with a TLS termination proxy uses PROXY version 2. There can be an assertion failure and daemon restart, which causes a performance loss.

CVSS 7.5 · High · EPSS 2.2% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • varnish Debian:12

    Affected ranges
    • ECOSYSTEM: < 6.4.0-1

    Update to 6.4.0-1

  • varnish Debian:13

    Affected ranges
    • ECOSYSTEM: < 6.4.0-1

    Update to 6.4.0-1

  • varnish Ubuntu:20.04:LTS

    Versions
    • 6.1.1-1
    • 6.2.1-2
    Affected ranges
    • ECOSYSTEM: < 6.2.1-2ubuntu0.1

    Update to 6.2.1-2ubuntu0.1

Original sources

Check your server →