CVE-2013-4484
Fixed in a distro release EPSS 3%
Varnish before 3.0.5 allows remote attackers to cause a denial of service (child-process crash and temporary caching outage) via a GET request with trailing whitespace characters and no URI.
Products: varnish-cache varnish, varnish_cache_project varnish_cache
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | varnish | 3.0.5-1 |
| Debian 13 | varnish | 3.0.5-1 |
| Debian 6.0 | varnish | 2.1.3-8+deb6u1 |
| Debian 7 | varnish | 3.0.2-2+deb7u1 |
| openSUSE Tumbleweed | varnish | 5.0.0-1.3 |
| openSUSE Tumbleweed | vinyl-cache | 9.0.0-1.1 |