{"id":"CVE-2022-45059","aliases":["ALPINE-CVE-2022-45059","BIT-varnish-2022-45059","DEBIAN-CVE-2022-45059","EUVD-2022-47981","GHSA-p22x-6r5h-g873","OESA-2023-1915","OESA-2023-1916","OESA-2023-1917","openSUSE-SU-2022:10198-1","openSUSE-SU-2024:12496-1","openSUSE-SU-2026:10751-1"],"status":"published","title":"An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request...","description":"An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smuggling attack can be performed on Varnish Cache servers by requesting that certain headers are made hop-by-hop, preventing the Varnish Cache servers from forwarding critical headers to the backend.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.01816,"percentile":0.78971,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-444"],"published":"2022-11-09T00:00:00Z","modified":"2026-11-03T08:03:09Z","exploits":[{"source":"pocgithub","id":"martinvks/CVE-2022-45059-demo","title":"martinvks/CVE-2022-45059-demo","date":"2023-11-12","url":"https://github.com/martinvks/CVE-2022-45059-demo"}],"fixes":[{"ecosystem":"Alpine:v3.17","package":"varnish","fixed_in":["7.2.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"varnish","fixed_in":["7.2.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"varnish","fixed_in":["7.2.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"varnish","fixed_in":["7.2.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"varnish","fixed_in":["7.2.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"varnish","fixed_in":["7.2.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"varnish","fixed_in":["7.2.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"varnish","fixed_in":["7.2.1-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"varnish","fixed_in":["7.1.2","7.2.1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"varnish","fixed_in":["7.1.1-1.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"varnish","fixed_in":["7.1.1-1.1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"varnish","fixed_in":["7.0.1-9.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"varnish","fixed_in":["7.0.1-9.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"varnish","fixed_in":["7.0.1-8.oe2203"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.17","package":"varnish","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"varnish","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"varnish","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"varnish","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"varnish","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"varnish","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"varnish","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"varnish","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.1-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"varnish","ranges":[{"type":"SEMVER","events":[{"introduced":"7.0.0"},{"fixed":"7.1.2"},{"introduced":"7.2.0"},{"fixed":"7.2.1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"varnish","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.1-1.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"varnish","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.1-1.1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"varnish","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.1-9.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"varnish","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.1-9.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"varnish","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.1-8.oe2203"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP4","package":"varnish","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.1-bp154.2.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"varnish","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.1-bp154.2.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"varnish","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.1-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"vinyl-cache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.0-1.1"}]}],"bundled":8}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"varnish_cache_project","product":"varnish_cache"}],"references":[{"url":"https://varnish-cache.org/security/VSV00010.html","tags":["x_transferred","Mitigation","Vendor Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G6ZMOZVBLZXHEV5VRW4I4SOWLQEK5OF5/","tags":["vendor-advisory","x_transferred","web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XGF6LFTHXCSYMYUX5HLMVXQH3WHCSFLU/","tags":["vendor-advisory","x_transferred","web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M4KVVCIQVINQQ2D7ORNARSYALMJUMP3I/","tags":["vendor-advisory","x_transferred","web","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-45059","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G6ZMOZVBLZXHEV5VRW4I4SOWLQEK5OF5"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M4KVVCIQVINQQ2D7ORNARSYALMJUMP3I"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XGF6LFTHXCSYMYUX5HLMVXQH3WHCSFLU"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G6ZMOZVBLZXHEV5VRW4I4SOWLQEK5OF5"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M4KVVCIQVINQQ2D7ORNARSYALMJUMP3I"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XGF6LFTHXCSYMYUX5HLMVXQH3WHCSFLU"},{"url":"https://github.com/advisories/GHSA-p22x-6r5h-g873"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-45059","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/45xxx/CVE-2022-45059.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-45059","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1915","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1916","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1917","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FJFEBVAZE52U2TMYLTOEW3F7YGVD7XQL/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1205242","tags":["report"]},{"url":"https://bugzilla.suse.com/1205243","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-45060","tags":["web"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-23959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-38150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-44487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-30346","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-45059","description":"An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smuggling attack can be performed on Varnish Cache servers by requesting that certain headers are made hop-by-hop, preventing the Varnish Cache servers from forwarding critical headers to the backend.","status":"published","published":"2022-11-09T00:00:00Z","modified":"2025-05-01T14:30:34.031Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"adp"}],"cwes":["CWE-444"],"updated_at":"2026-11-02T14:34:31.840191Z"}],"euvd":[{"id":"EUVD-2022-47981","description":"An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smuggling attack can be performed on Varnish Cache servers by requesting that certain headers are made hop-by-hop, preventing the Varnish Cache servers from forwarding critical headers to the backend.","status":"published","published":"2022-11-09T00:00:00Z","modified":"2025-05-01T14:30:34Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T20:51:57.509565Z"}],"ghsa":[{"id":"GHSA-p22x-6r5h-g873","title":"An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request...","description":"An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smuggling attack can be performed on Varnish Cache servers by requesting that certain headers are made hop-by-hop, preventing the Varnish Cache servers from forwarding critical headers to the backend.","status":"published","published":"2022-11-09T12:00:19Z","modified":"2025-05-01T15:32:30Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-444"],"updated_at":"2026-11-02T15:02:05.229867Z"}],"nvd":[{"id":"CVE-2022-45059","description":"An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smuggling attack can be performed on Varnish Cache servers by requesting that certain headers are made hop-by-hop, preventing the Varnish Cache servers from forwarding critical headers to the backend.","status":"published","published":"2022-11-09T06:15:09.683Z","modified":"2026-06-17T05:09:15.867Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-444"],"updated_at":"2026-11-02T14:07:31.914793Z"}],"osv":[{"id":"ALPINE-CVE-2022-45059","description":"An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smuggling attack can be performed on Varnish Cache servers by requesting that certain headers are made hop-by-hop, preventing the Varnish Cache servers from forwarding critical headers to the backend.","status":"published","published":"2022-11-09T06:15:09.683Z","modified":"2026-11-03T07:18:33.769669958Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-03T07:50:38.973973Z"},{"id":"CVE-2022-45059","description":"An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smuggling attack can be performed on Varnish Cache servers by requesting that certain headers are made hop-by-hop, preventing the Varnish Cache servers from forwarding critical headers to the backend.","status":"published","published":"2022-11-09T00:00:00Z","modified":"2026-10-28T02:30:59.110720026Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:27.481647Z"},{"id":"DEBIAN-CVE-2022-45059","description":"An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smuggling attack can be performed on Varnish Cache servers by requesting that certain headers are made hop-by-hop, preventing the Varnish Cache servers from forwarding critical headers to the backend.","status":"published","published":"2022-11-09T06:15:09.683Z","modified":"2026-11-03T08:03:09.81202041Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-03T08:24:39.643572Z"},{"id":"OESA-2023-1915","title":"varnish security update","description":"This is Varnish Cache, a web application accelerator also known as a caching HTTP reverse proxy. You install it in front of any server that speaks HTTP and configure it to cache the contents. Varnish Cache is really, really fast. It typically speeds up delivery with a factor of 300 - 1000x, depending on your architecture.\r\n\r\nSecurity Fix(es):\r\n\r\nAn issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smuggling attack can be performed on Varnish Cache servers by requesting that certain headers are made hop-by-hop, preventing the Varnish Cache servers from forwarding critical headers to the backend.(CVE-2022-45059)","status":"published","published":"2023-12-15T11:06:21Z","modified":"2026-08-18T01:18:05.395600942Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2023-1916","title":"varnish security update","description":"This is Varnish Cache, a web application accelerator also known as a caching HTTP reverse proxy. You install it in front of any server that speaks HTTP and configure it to cache the contents. Varnish Cache is really, really fast. It typically speeds up delivery with a factor of 300 - 1000x, depending on your architecture.\r\n\r\nSecurity Fix(es):\r\n\r\nAn issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smuggling attack can be performed on Varnish Cache servers by requesting that certain headers are made hop-by-hop, preventing the Varnish Cache servers from forwarding critical headers to the backend.(CVE-2022-45059)","status":"published","published":"2023-12-15T11:06:21Z","modified":"2026-08-18T01:18:05.433154031Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2023-1917","title":"varnish security update","description":"This is Varnish Cache, a web application accelerator also known as a caching HTTP reverse proxy. You install it in front of any server that speaks HTTP and configure it to cache the contents. Varnish Cache is really, really fast. It typically speeds up delivery with a factor of 300 - 1000x, depending on your architecture.\r\n\r\nSecurity Fix(es):\r\n\r\nAn issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smuggling attack can be performed on Varnish Cache servers by requesting that certain headers are made hop-by-hop, preventing the Varnish Cache servers from forwarding critical headers to the backend.(CVE-2022-45059)","status":"published","published":"2023-12-15T11:06:21Z","modified":"2026-08-18T01:18:05.548359622Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"BIT-varnish-2022-45059","description":"An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smuggling attack can be performed on Varnish Cache servers by requesting that certain headers are made hop-by-hop, preventing the Varnish Cache servers from forwarding critical headers to the backend.","status":"published","published":"2024-03-06T11:08:06.56Z","modified":"2026-09-08T08:48:21.294838132Z","updated_at":"2026-11-02T15:28:36.104787Z"},{"id":"openSUSE-SU-2022:10198-1","title":"Security update for varnish","description":"This update for varnish fixes the following issues:\n\nUpdate to 7.2.1:\n\n- CVE-2022-45059: Fixed a HTTP request smuggling via hop-by-hop headers (boo#1205243).\n- CVE-2022-45060: Fixed a HTTP request forgery via character injection through HTTP/2 pseudo-headers (boo#1205242).\n","status":"published","published":"2022-11-11T11:15:39Z","modified":"2026-02-04T04:33:07.798159Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2024:12496-1","title":"libvarnishapi3-7.2.1-1.1 on GA media","description":"These are all security issues fixed in the libvarnishapi3-7.2.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:44:09.443565Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"openSUSE-SU-2026:10751-1","title":"libvinylapi3-9.0.0-1.1 on GA media","description":"These are all security issues fixed in the libvinylapi3-9.0.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-05-11T00:00:00Z","modified":"2026-05-12T08:45:57.407348Z","updated_at":"2026-11-02T16:58:38.415593Z"}]}}