Unscored severity · published Nov 1, 2013
CVE-2013-4484
Varnish before 3.0.5 allows remote attackers to cause a denial of service (child-process crash and temporary caching outage) via a GET request with trailing whitespace characters…
–
CVSS
3.2%
EPSS
No
On KEV
Description
Varnish before 3.0.5 allows remote attackers to cause a denial of service (child-process crash and temporary caching outage) via a GET request with trailing whitespace characters and no URI.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.2% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VA
Varnish · Varnish-cache
2.0.0 · source: NVD
VC
Varnish Cache · Varnish Cache Project
through 3.0.4; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +13 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-4484
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-4484
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2013-10/0158.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2013-11/msg00029.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2013-11/msg00033.html
secunia.com
http://secunia.com/advisories/55452
secunia.com
http://secunia.com/advisories/55746
www.debian.org
http://www.debian.org/security/2012/dsa-2814
More from Varnish Cache
9.1
CVE-2022-23959
In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x before 4.1.11r6 and 6.0.x before 6.0.9r4,…
9.1
CVE-2017-8807
vbf_stp_error in bin/varnishd/cache/cache_fetch.c in Varnish HTTP Cache 4.1.x before 4.1.9 and 5.x before 5.2.1 allows remote attackers to obtain sensitive information from…
7.5
CVE-2022-45060
An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x before 7.2.1
7.5
CVE-2022-45059
An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1
7.5
CVE-2022-38150
In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to assert and automatically restart through forged HTTP/1 backend responses