PT-2013-1073 · Varnish · Varnish

Tollef Fog Heen · Publicado 2013-11-01 · Atualizado 2026-05-11 · CVE-2013-4484

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Varnish versions prior to 3.0.5

Description The issue allows remote attackers to cause a denial of service, leading to a child-process crash and temporary caching outage. This can be achieved via a GET request with trailing whitespace characters and no URI.

Recommendations For versions prior to 3.0.5, update to version 3.0.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the Varnish service to minimize the risk of exploitation.

Exploit

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2015-02536

CVE-2013-4484

DSA-2814-1

MGASA-2014-0065

OPENSUSE-SU-2024:10116-1

OPENSUSE-SU-2026:10751-1

Produtos afetados

Varnish

Referências · 34

• 🔥 https://varnish-cache.org/trac/ticket/1367 · Exploit
• https://suse.com/security/cve/CVE-2022-45060 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=11678 · Nota
• http://lists.opensuse.org/opensuse-updates/2013-11/msg00029.html · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2013/10/30/5 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10116-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2026:10751-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2013-4484 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2013-10/0158.html · Nota
• https://osv.dev/vulnerability/MGASA-2014-0065 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4484 · Nota de Segurança
• https://ubuntu.com/security/CVE-2013-4484 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2025-30346 · Nota
• https://suse.com/security/cve/CVE-2022-45059 · Nota
• https://suse.com/security/cve/CVE-2023-44487 · Nota