Alpine/varnish: high 7.5
An issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x and 6.2.x before 6.2.1. An HTTP/1 parsing failure allows a remote attacker to trigger an assert by sending crafted HTTP/1 requests.
Action: Upgrade varnish to 6.2.1-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.2.1-r0 | - |
Fixed versions
| 6.2.1-r0 |
Sources
- osv: ALPINE-CVE-2019-15892#Alpine:v3.16/varnish
- https://security.alpinelinux.org/vuln/CVE-2019-15892
published · modified · JSON