CVE-2013-4484 | BDVDB-2026-58264 Detail
Description#
Varnish before 3.0.5 allows remote attackers to cause a denial of service (child-process crash and temporary caching outage) via a GET request with trailing whitespace characters and no URI.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://lists.opensuse.org/opensuse-updates/2013-11/msg00029.html
- http://www.debian.org/security/2012/dsa-2814
- http://www.openwall.com/lists/oss-security/2013/10/30/5
- http://archives.neohapsis.com/archives/bugtraq/2013-10/0158.html
- http://lists.opensuse.org/opensuse-updates/2013-11/msg00033.html
- https://www.varnish-cache.org/trac/ticket/1367
- http://secunia.com/advisories/55746
- http://secunia.com/advisories/55452
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.