PT-2017-12550 · Varnish · Varnish Http Cache
Mbgrydeland
·
Publicado
2017-08-02
·
Atualizado
2022-08-02
·
CVE-2017-12425
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Varnish HTTP Cache versions 4.0.1 through 4.0.4
Varnish HTTP Cache versions 4.1.0 through 4.1.7
Varnish HTTP Cache version 5.0.0
Varnish HTTP Cache versions 5.1.0 through 5.1.2
Description
An issue was discovered in the varnishd source code, where a wrong if statement can cause the varnishd worker process to abort and restart when particular invalid requests are made from the client. This is related to an Integer Overflow, which can trigger an assert. As a result, an attacker can crash the varnishd worker process on demand, effectively preventing it from serving content, thus achieving a Denial-of-Service attack.
Recommendations
For Varnish HTTP Cache versions 4.0.1 through 4.0.4, update to a version outside of this range to mitigate the risk.
For Varnish HTTP Cache versions 4.1.0 through 4.1.7, update to a version outside of this range to mitigate the risk.
For Varnish HTTP Cache version 5.0.0, update to a version outside of this specific version to mitigate the risk.
For Varnish HTTP Cache versions 5.1.0 through 5.1.2, update to a version outside of this range to mitigate the risk.
As a temporary workaround, consider restricting access to the varnishd worker process to minimize the risk of exploitation.
Correção
DoS
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Varnish Http Cache