CVE-2022-38150
In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to...
In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to assert and automatically restart through forged HTTP/1 backend responses. An attack uses a crafted reason phrase of the backend response status line. This is fixed in 7.0.3 and 7.1.1.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to assert and automatically restart through forged HTTP/1 backend responses. An attack uses a crafted reason phrase of the backend response status line. This is fixed in 7.0.3 and 7.1.1.
- Record
CVE-2022-38150- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
CVE List
In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to assert and automatically restart through forged HTTP/1 backend responses. An attack uses a crafted reason phrase of the backend response status line. This is fixed in 7.0.3 and 7.1.1.
- Record
CVE-2022-38150- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
EUVDEUVD-2022-40747
In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to assert and automatically restart through forged HTTP/1 backend responses. An attack uses a crafted reason phrase of the backend response status line. This is fixed in 7.0.3 and 7.1.1.
- Record
EUVD-2022-40747- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-jg6x-rh3w-6pp3
In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to...
In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to assert and automatically restart through forged HTTP/1 backend responses. An attack uses a crafted reason phrase of the backend response status line. This is fixed in 7.0.3 and 7.1.1.
- Record
GHSA-jg6x-rh3w-6pp3- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
OSVALPINE-CVE-2022-38150
In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to assert and automatically restart through forged HTTP/1 backend responses. An attack uses a crafted reason phrase of the backend response status line. This is fixed in 7.0.3 and 7.1.1.
- Record
ALPINE-CVE-2022-38150- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
OSV
In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to assert and automatically restart through forged HTTP/1 backend responses. An attack uses a crafted reason phrase of the backend response status line. This is fixed in 7.0.3 and 7.1.1.
- Record
CVE-2022-38150- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 6 moreShow less
OSVOESA-2022-1854
varnish security update
This is Varnish Cache, a web application accelerator also known as a caching HTTP reverse proxy. You install it in front of any server that speaks HTTP and configure it to cache the contents. Varnish Cache is really, really fast. It typically speeds up delivery with a factor of 300 - 1000x, depending on your architecture.
Security Fix(es):
In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to assert and automatically restart through forged HTTP/1 backend responses. An attack uses a crafted reason phrase of the backend response status line. This is fixed in 7.0.3 and 7.1.1.(CVE-2022-38150)
- Record
OESA-2022-1854- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVBIT-varnish-2022-38150 No score
In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to assert and automatically restart through forged HTTP/1 backend responses. An attack uses a crafted reason phrase of the backend response status line. This is fixed in 7.0.3 and 7.1.1.
- Record
BIT-varnish-2022-38150- Updated
- 2026-11-02
OSVDEBIAN-CVE-2022-38150 No score
In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to assert and automatically restart through forged HTTP/1 backend responses. An attack uses a crafted reason phrase of the backend response status line. This is fixed in 7.0.3 and 7.1.1.
- Record
DEBIAN-CVE-2022-38150- Updated
- 2026-11-03
OSVopenSUSE-SU-2022:10104-1 No score
Security update for varnish
This update for varnish fixes the following issues:
Update to release 7.1.1:
- CVE-2022-38150: Resolve a denial of service attack involving reason phrases (boo#1202350).
- Record
openSUSE-SU-2022:10104-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12255-1 No score
libvarnishapi3-7.1.1-1.1 on GA media
These are all security issues fixed in the libvarnishapi3-7.1.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12255-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:10751-1 No score
libvinylapi3-9.0.0-1.1 on GA media
These are all security issues fixed in the libvinylapi3-9.0.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:10751-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
varnishAlpine:v3.17 |
before 7.1.1-r0 | 7.1.1-r0 |
varnishAlpine:v3.18 |
before 7.0.3-r0 | 7.0.3-r0 |
varnishAlpine:v3.19 |
before 7.0.3-r0 | 7.0.3-r0 |
varnishAlpine:v3.20 |
before 7.0.3-r0 | 7.0.3-r0 |
varnishAlpine:v3.21 |
before 7.0.3-r0 | 7.0.3-r0 |
varnishAlpine:v3.22 |
before 7.0.3-r0 | 7.0.3-r0 |
varnishAlpine:v3.23 |
before 7.0.3-r0 | 7.0.3-r0 |
varnishAlpine:v3.24 |
before 7.0.3-r0 | 7.0.3-r0 |
varnishBitnami |
7.0.0 up to 7.0.1, 7.0.1 up to 7.0.2, 7.0.2 up to 7.0.3, 7.1.0 up to 7.1.1 | 7.0.17.0.27.0.37.1.1 |
varnishDebian:12 |
before 7.1.1-1 | 7.1.1-1 |
Show 6 moreShow less
| Package | Affected | Fixed |
|---|---|---|
varnishDebian:13 |
before 7.1.1-1 | 7.1.1-1 |
varnishopenEuler:22.03-LTS |
before 7.0.1-6.oe2203 | 7.0.1-6.oe2203 |
varnishSUSE:Package Hub 15 SP4 |
before 7.1.1-bp154.2.6.1 | 7.1.1-bp154.2.6.1 |
varnishopenSUSE:Leap 15.4 |
before 7.1.1-bp154.2.6.1 | 7.1.1-bp154.2.6.1 |
varnishopenSUSE:Tumbleweed |
before 7.1.1-1.1 | 7.1.1-1.1 |
vinyl-cacheopenSUSE:Tumbleweed From an advisory covering 8 CVEs |
before 9.0.0-1.1 | 9.0.0-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-38150 is a high vulnerability (CVSS 7.5) in Varnish Cache Project Cache, published August 11, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.50%, the 74th percentile. Fixed in varnish 7.1.1-r0.
References
varnish-cache.org/security/VSV00009.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2BUKFICLZBXESLQ3MXMIG3G52RZURFK
nvd.nist.gov/vuln/detail/CVE-2022-38150
Show 17 moreShow less
github.com/advisories/GHSA-jg6x-rh3w-6pp3
security.alpinelinux.org/vuln/CVE-2022-38150
security-tracker.debian.org/tracker/CVE-2022-38150
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1854
lists.opensuse.org/archives/list/[email protected]/thread/FGTUXRJ4UZ7LV4AXMK3BKM3PS3MYHCPO
bugzilla.suse.com/1202350
suse.com/security/cve/CVE-2022-38150