PT-2020-22784 · Varnish · Varnish Cache

Published 2020-01-07 · Updated 2020-01-07

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Varnish Cache versions prior to 6.3.1

Description A bug has been discovered in Varnish Cache where a pointer is not properly cleared between client requests on the same connection, potentially leading to information leakage under specific circumstances.

Recommendations For versions prior to 6.3.1, update to version 6.3.1 to resolve the issue.

Related Identifiers

MGASA-2020-0025

Affected Products

Varnish Cache

References · 6

• https://osv.dev/vulnerability/MGASA-2020-0025 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2020-0025.html · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/B3OBLEH47QRUDDGH3YDMJ3SNT3D5LLDB · Vendor Advisory
• https://varnish-cache.org/security/VSV00004.html · Note
• https://varnish-cache.org/docs/6.3/whats-new/index.html · Note
• https://bugs.mageia.org/show_bug.cgi?id=25960 · Note