CVE-2025-47905
Fixed in a distro release EPSS <1%CVSS 5.4
Varnish Cache before 7.6.3 and 7.7 before 7.7.1, and Varnish Enterprise before 6.0.13r14, allow client-side desync via HTTP/1 requests, because the product incorrectly permits CRLF to be skipped to delimit chunk boundaries.
Products: varnish-software varnish_cache
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 10 | varnish | 7.6.1-2.el10_0.1 |
| AlmaLinux 10 | varnish-devel | 7.6.1-2.el10_0.1 |
| AlmaLinux 10 | varnish-docs | 7.6.1-2.el10_0.1 |
| AlmaLinux 8 | varnish | 6.0.13-1.module_el8.10.0+4003+9759c3c1.1 |
| AlmaLinux 8 | varnish-devel | 6.0.13-1.module_el8.10.0+4003+9759c3c1.1 |
| AlmaLinux 8 | varnish-docs | 6.0.13-1.module_el8.10.0+4003+9759c3c1.1 |
| AlmaLinux 8 | varnish-modules | 0.15.0-6.module_el8.9.0+3826+307eaba4 |
| AlmaLinux 9 | varnish | 6.6.2-6.el9_6.1 |
| AlmaLinux 9 | varnish-devel | 6.6.2-6.el9_6.1 |
| AlmaLinux 9 | varnish-docs | 6.6.2-6.el9_6.1 |
| Alpine 3.21 | varnish | 7.6.3-r0 |
| Alpine 3.22 | varnish | 7.7.1-r0 |
| Alpine 3.23 | varnish | 7.7.1-r0 |
| Alpine 3.24 | varnish | 7.7.1-r0 |
| Debian 11 | varnish | 6.5.1-1+deb11u5 |
| Debian 12 | varnish | 7.1.1-2+deb12u1 |
| Debian 13 | varnish | 7.7.0-2 |
| Red Hat Enterprise Linux 10.0 | varnish | 0:7.6.1-2.el10_0.1 |
| Red Hat Enterprise Linux 10.0 | varnish-devel | 0:7.6.1-2.el10_0.1 |
| Red Hat Enterprise Linux 10.0 | varnish-docs | 0:7.6.1-2.el10_0.1 |
| Red Hat Enterprise Linux 8 | varnish | 0:6.0.13-1.module+el8.10.0+23111+831cc069.1 |
| Red Hat Enterprise Linux 8 | varnish-devel | 0:6.0.13-1.module+el8.10.0+23111+831cc069.1 |
| Red Hat Enterprise Linux 8 | varnish-docs | 0:6.0.13-1.module+el8.10.0+23111+831cc069.1 |
| Red Hat Enterprise Linux 8 | varnish-modules | 0:0.15.0-6.module+el8.10.0+21682+bcdd3a30 |
| Red Hat Enterprise Linux 8 | varnish-modules-debuginfo | 0:0.15.0-6.module+el8.10.0+21682+bcdd3a30 |
| Red Hat Enterprise Linux 8 | varnish-modules-debugsource | 0:0.15.0-6.module+el8.10.0+21682+bcdd3a30 |
| Red Hat Enterprise Linux 9 | varnish | 0:6.6.2-6.el9_6.1 |
| Red Hat Enterprise Linux 9 | varnish-devel | 0:6.6.2-6.el9_6.1 |
| Red Hat Enterprise Linux 9 | varnish-docs | 0:6.6.2-6.el9_6.1 |
| Red Hat rhel aus 8.2 | varnish | 0:6.0.6-1.module+el8.2.0+23124+897a7786.1 |
| Red Hat rhel aus 8.2 | varnish-devel | 0:6.0.6-1.module+el8.2.0+23124+897a7786.1 |
| Red Hat rhel aus 8.2 | varnish-docs | 0:6.0.6-1.module+el8.2.0+23124+897a7786.1 |
| Red Hat rhel aus 8.2 | varnish-modules | 0:0.15.0-4.module+el8+2481+4078e9d2 |
| Red Hat rhel aus 8.2 | varnish-modules-debuginfo | 0:0.15.0-4.module+el8+2481+4078e9d2 |
| Red Hat rhel aus 8.2 | varnish-modules-debugsource | 0:0.15.0-4.module+el8+2481+4078e9d2 |
| Red Hat rhel aus 8.4 | varnish | 0:6.0.6-2.module+el8.4.0+23123+54dbaab7.6 |
| Red Hat rhel aus 8.4 | varnish-devel | 0:6.0.6-2.module+el8.4.0+23123+54dbaab7.6 |
| Red Hat rhel aus 8.4 | varnish-docs | 0:6.0.6-2.module+el8.4.0+23123+54dbaab7.6 |
| Red Hat rhel aus 8.4 | varnish-modules | 0:0.15.0-5.module+el8.3.0+6843+b3b42fcc |
| Red Hat rhel aus 8.4 | varnish-modules-debuginfo | 0:0.15.0-5.module+el8.3.0+6843+b3b42fcc |
| Red Hat rhel aus 8.4 | varnish-modules-debugsource | 0:0.15.0-5.module+el8.3.0+6843+b3b42fcc |
| Red Hat rhel aus 8.6 | varnish | 0:6.0.8-2.module+el8.6.0+23122+0639db89.4 |
| Red Hat rhel aus 8.6 | varnish-devel | 0:6.0.8-2.module+el8.6.0+23122+0639db89.4 |
| Red Hat rhel aus 8.6 | varnish-docs | 0:6.0.8-2.module+el8.6.0+23122+0639db89.4 |
| Red Hat rhel aus 8.6 | varnish-modules | 0:0.15.0-6.module+el8.5.0+11976+0b4af72d |
| Red Hat rhel aus 8.6 | varnish-modules-debuginfo | 0:0.15.0-6.module+el8.5.0+11976+0b4af72d |
| Red Hat rhel aus 8.6 | varnish-modules-debugsource | 0:0.15.0-6.module+el8.5.0+11976+0b4af72d |
| Red Hat rhel e4s 8.4 | varnish | 0:6.0.6-2.module+el8.4.0+23123+54dbaab7.6 |
| Red Hat rhel e4s 8.4 | varnish-devel | 0:6.0.6-2.module+el8.4.0+23123+54dbaab7.6 |
| Red Hat rhel e4s 8.4 | varnish-docs | 0:6.0.6-2.module+el8.4.0+23123+54dbaab7.6 |
| Red Hat rhel e4s 8.4 | varnish-modules | 0:0.15.0-5.module+el8.3.0+6843+b3b42fcc |
| Red Hat rhel e4s 8.4 | varnish-modules-debuginfo | 0:0.15.0-5.module+el8.3.0+6843+b3b42fcc |
| Red Hat rhel e4s 8.4 | varnish-modules-debugsource | 0:0.15.0-5.module+el8.3.0+6843+b3b42fcc |
| Red Hat rhel e4s 8.6 | varnish | 0:6.0.8-2.module+el8.6.0+23122+0639db89.4 |
| Red Hat rhel e4s 8.6 | varnish-devel | 0:6.0.8-2.module+el8.6.0+23122+0639db89.4 |
| Red Hat rhel e4s 8.6 | varnish-docs | 0:6.0.8-2.module+el8.6.0+23122+0639db89.4 |
| Red Hat rhel e4s 8.6 | varnish-modules | 0:0.15.0-6.module+el8.5.0+11976+0b4af72d |
| Red Hat rhel e4s 8.6 | varnish-modules-debuginfo | 0:0.15.0-6.module+el8.5.0+11976+0b4af72d |
| Red Hat rhel e4s 8.6 | varnish-modules-debugsource | 0:0.15.0-6.module+el8.5.0+11976+0b4af72d |
| Red Hat rhel e4s 9.0 | varnish | 0:6.6.2-2.el9_0.4 |
| Red Hat rhel e4s 9.0 | varnish-docs | 0:6.6.2-2.el9_0.4 |
| Red Hat rhel eus 8.8 | varnish | 0:6.0.8-3.module+el8.8.0+23121+d8c7990e.3 |
| Red Hat rhel eus 8.8 | varnish-devel | 0:6.0.8-3.module+el8.8.0+23121+d8c7990e.3 |
| Red Hat rhel eus 8.8 | varnish-docs | 0:6.0.8-3.module+el8.8.0+23121+d8c7990e.3 |
| Red Hat rhel eus 8.8 | varnish-modules | 0:0.15.0-6.module+el8.5.0+11976+0b4af72d |
| Red Hat rhel eus 8.8 | varnish-modules-debuginfo | 0:0.15.0-6.module+el8.5.0+11976+0b4af72d |
| Red Hat rhel eus 8.8 | varnish-modules-debugsource | 0:0.15.0-6.module+el8.5.0+11976+0b4af72d |
| Red Hat rhel eus 9.2 | varnish | 0:6.6.2-3.el9_2.3 |
| Red Hat rhel eus 9.2 | varnish-devel | 0:6.6.2-3.el9_2.3 |
| Red Hat rhel eus 9.2 | varnish-docs | 0:6.6.2-3.el9_2.3 |
| Red Hat rhel eus 9.4 | varnish | 0:6.6.2-5.el9_4.1 |
| Red Hat rhel eus 9.4 | varnish-devel | 0:6.6.2-5.el9_4.1 |
| Red Hat rhel eus 9.4 | varnish-docs | 0:6.6.2-5.el9_4.1 |
| Red Hat rhel tus 8.4 | varnish | 0:6.0.6-2.module+el8.4.0+23123+54dbaab7.6 |
| Red Hat rhel tus 8.4 | varnish-devel | 0:6.0.6-2.module+el8.4.0+23123+54dbaab7.6 |
| Red Hat rhel tus 8.4 | varnish-docs | 0:6.0.6-2.module+el8.4.0+23123+54dbaab7.6 |
| Red Hat rhel tus 8.4 | varnish-modules | 0:0.15.0-5.module+el8.3.0+6843+b3b42fcc |
| Red Hat rhel tus 8.4 | varnish-modules-debuginfo | 0:0.15.0-5.module+el8.3.0+6843+b3b42fcc |
| Red Hat rhel tus 8.4 | varnish-modules-debugsource | 0:0.15.0-5.module+el8.3.0+6843+b3b42fcc |
| Red Hat rhel tus 8.6 | varnish | 0:6.0.8-2.module+el8.6.0+23122+0639db89.4 |
| Red Hat rhel tus 8.6 | varnish-devel | 0:6.0.8-2.module+el8.6.0+23122+0639db89.4 |
| Red Hat rhel tus 8.6 | varnish-docs | 0:6.0.8-2.module+el8.6.0+23122+0639db89.4 |
| Red Hat rhel tus 8.6 | varnish-modules | 0:0.15.0-6.module+el8.5.0+11976+0b4af72d |
| Red Hat rhel tus 8.6 | varnish-modules-debuginfo | 0:0.15.0-6.module+el8.5.0+11976+0b4af72d |
| Red Hat rhel tus 8.6 | varnish-modules-debugsource | 0:0.15.0-6.module+el8.5.0+11976+0b4af72d |
| Rocky Linux 10 | varnish | 0:7.6.1-2.el10_0.1 |
| Rocky Linux 8 | varnish | 0:6.0.13-1.module+el8.9.0+1777+0acf9965 |
| Rocky Linux 8 | varnish | 0:6.0.13-1.module+el8.10.0+1982+334a201b.1 |
| Rocky Linux 8 | varnish-modules | 0:0.15.0-6.module+el8.5.0+677+2a78a869 |
| Rocky Linux 9 | varnish | 0:6.6.2-6.el9_6.1 |
| Ubuntu 14.04 LTS | varnish | no fix |
| Ubuntu 24.04 LTS | varnish | no fix |
| Ubuntu Pro 16.04 LTS | varnish | no fix |
| Ubuntu Pro 18.04 LTS | varnish | no fix |
| Ubuntu Pro 20.04 LTS | varnish | no fix |
| Ubuntu Pro 22.04 LTS | varnish | no fix |