CVE-2019-20637

Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up.

The following packages have been upgraded to a later upstream version: varnish (6.0.6). (BZ#1795673)

Security Fix(es):

• varnish: denial of service handling certain crafted HTTP/1 requests (CVE-2019-15892)

• varnish: remote clients may cause Varnish to assert and restart which could result in DoS (CVE-2020-11653)

• varnish: not clearing pointer between two client requests leads to information disclosure (CVE-2019-20637)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.

An issue was discovered in Varnish Cache before 6.0.5 LTS, 6.1.x and 6.2.x before 6.2.2, and 6.3.x before 6.3.1. It does not clear a pointer between the handling of one client request and the next request within the same connection. This sometimes causes information to be disclosed from the connection workspace, such as data structures associated with previous requests within this connection or VCL-related temporary headers.

This update for varnish fixes the following issues:

• CVE-2019-20637: Fixed an information leak when handling one client request and the next on the same connection (boo#1169040)
• CVE-2020-11653: Fixed a performance loss due to an assertion failure and daemon restart when communicating with TLS termination proxy that uses PROXY version 2 (boo#1169039)

This update for varnish fixes the following issues:

• CVE-2019-20637: Fixed an information leak when handling one client request and the next on the same connection (boo#1169040)
• CVE-2020-11653: Fixed a performance loss due to an assertion failure and daemon restart when communicating with TLS termination proxy that uses PROXY version 2 (boo#1169039)

This update was imported from the openSUSE:Leap:15.1:Update update project.

It was dicovered that Varnish Cache did not clear a pointer between the handling of one client request and the next request within the same connection. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2019-20637)

It was discovered that Varnish Cache could have an assertion failure when a TLS termination proxy uses PROXY version 2. A remote attacker could possibly use this issue to restart the daemon and cause a performance loss. (CVE-2020-11653)

It was discovered that Varnish Cache allowed request smuggling and VCL authorization bypass via a large Content-Length header for a POST request. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2021-36740)

It was discovered that Varnish Cache allowed request smuggling for HTTP/1 connections. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2022-23959)