Varnish: Multiple vulnerabilities — GLSA 201607-10

Improper input validation in Varnish allows remote attackers to conduct HTTP smuggling attacks, and possibly trigger a buffer overflow.

Affected packages

Background

Varnish is a web application accelerator.

Description

Varnish fails to properly validate input from HTTP headers, and does not deny requests with multiple Content-Length headers.

Impact

Remote attackers could conduct an HTTP response splitting attack, which may further enable them to conduct Cross-Site Scripting (XSS), Cache Poisoning, Defacement, and Page Hijacking.

Workaround

There is no known workaround at this time.

Resolution

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=www-servers/varnish-3.0.7"
 

References

• CVE-2015-8852

Release date
July 20, 2016

Latest revision
July 20, 2016: 1

Severity
normal

Exploitable
remote

Bugzilla entries

• 542886