CVE-2021-36740
Fixed in a distro release EPSS 2%
Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a large Content-Length header for a POST request. This affects Varnish Enterprise 6.0.x before 6.0.8r3, and Varnish Cache 5.x and 6.x before 6.5.2, 6.6.x before 6.6.1, and 6.0 LTS before 6.0.8.
Products: varnish-cache varnish_cache, varnish-software varnish_cache, varnish_cache_project varnish_cache, fedoraproject fedora, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.11 | varnish | 6.5.2-r0 |
| Alpine 3.12 | varnish | 6.5.2-r0 |
| Alpine 3.13 | varnish | 6.5.2-r0 |
| Alpine 3.14 | varnish | 6.6.1-r0 |
| Alpine 3.15 | varnish | 6.6.1-r0 |
| Alpine 3.16 | varnish | 6.6.1-r0 |
| Alpine 3.17 | varnish | 6.6.1-r0 |
| Alpine 3.18 | varnish | 6.6.1-r0 |
| Alpine 3.19 | varnish | 6.6.1-r0 |
| Alpine 3.20 | varnish | 6.6.1-r0 |
| Alpine 3.21 | varnish | 6.6.1-r0 |
| Alpine 3.22 | varnish | 6.6.1-r0 |
| Alpine 3.23 | varnish | 6.6.1-r0 |
| Alpine 3.24 | varnish | 6.6.1-r0 |
| Debian 10 | varnish | 6.1.1-1+deb10u3 |
| Debian 11 | varnish | 6.5.1-1+deb11u2 |
| Debian 12 | varnish | 6.5.2-1 |
| Debian 13 | varnish | 6.5.2-1 |
| Red Hat Enterprise Linux 8 | varnish | 0:6.0.6-2.module+el8.4.0+11921+1a6539fc.1 |
| Red Hat Enterprise Linux 8 | varnish-devel | 0:6.0.6-2.module+el8.4.0+11921+1a6539fc.1 |
| Red Hat Enterprise Linux 8 | varnish-docs | 0:6.0.6-2.module+el8.4.0+11921+1a6539fc.1 |
| Red Hat Enterprise Linux 8 | varnish-modules | 0:0.15.0-5.module+el8.3.0+6843+b3b42fcc |
| Red Hat Enterprise Linux 8 | varnish-modules-debuginfo | 0:0.15.0-5.module+el8.3.0+6843+b3b42fcc |
| Red Hat Enterprise Linux 8 | varnish-modules-debugsource | 0:0.15.0-5.module+el8.3.0+6843+b3b42fcc |
| Red Hat rhel eus 8.1 | varnish | 0:6.0.2-2.module+el8.1.0+11974+ea5ba4f1 |
| Red Hat rhel eus 8.1 | varnish-devel | 0:6.0.2-2.module+el8.1.0+11974+ea5ba4f1 |
| Red Hat rhel eus 8.1 | varnish-docs | 0:6.0.2-2.module+el8.1.0+11974+ea5ba4f1 |
| Red Hat rhel eus 8.1 | varnish-modules | 0:0.15.0-4.module+el8+2481+4078e9d2 |
| Red Hat rhel eus 8.1 | varnish-modules-debuginfo | 0:0.15.0-4.module+el8+2481+4078e9d2 |
| Red Hat rhel eus 8.1 | varnish-modules-debugsource | 0:0.15.0-4.module+el8+2481+4078e9d2 |
| Red Hat rhel eus 8.2 | varnish | 0:6.0.2-2.module+el8.2.0+11973+a748eca7 |
| Red Hat rhel eus 8.2 | varnish-devel | 0:6.0.2-2.module+el8.2.0+11973+a748eca7 |
| Red Hat rhel eus 8.2 | varnish-docs | 0:6.0.2-2.module+el8.2.0+11973+a748eca7 |
| Red Hat rhel eus 8.2 | varnish-modules | 0:0.15.0-4.module+el8+2481+4078e9d2 |
| Red Hat rhel eus 8.2 | varnish-modules-debuginfo | 0:0.15.0-4.module+el8+2481+4078e9d2 |
| Red Hat rhel eus 8.2 | varnish-modules-debugsource | 0:0.15.0-4.module+el8+2481+4078e9d2 |
| Red Hat rhel software collections 3 | rh-varnish6-varnish | 0:6.0.8-2.el7 |
| Red Hat rhel software collections 3 | rh-varnish6-varnish-devel | 0:6.0.8-2.el7 |
| Red Hat rhel software collections 3 | rh-varnish6-varnish-docs | 0:6.0.8-2.el7 |
| Red Hat rhel software collections 3 | rh-varnish6-varnish-libs | 0:6.0.8-2.el7 |
| Red Hat rhel software collections 3 | rh-varnish6-varnish-modules | 0:0.15.0-7.el7 |
| Red Hat rhel software collections 3 | rh-varnish6-varnish-modules-debuginfo | 0:0.15.0-7.el7 |
| Rocky Linux 8 | varnish | 0:6.0.6-2.module+el8.3.0+179+20b582cc |
| Rocky Linux 8 | varnish-modules | 0:0.15.0-5.module+el8.3.0+179+20b582cc |
| SUSE Package Hub 15 SP3 | varnish | 7.1.0-bp153.2.3.1 |
| Ubuntu 18.04 LTS | varnish | 5.2.1-1ubuntu0.1 |
| Ubuntu 20.04 LTS | varnish | 6.2.1-2ubuntu0.1 |
| Ubuntu 22.04 LTS | varnish | 6.6.1-1ubuntu0.2 |
| openSUSE Leap 15.3 | varnish | 7.1.0-bp153.2.3.1 |