High severity · published Aug 4, 2017
CVE-2017-12425
An issue was discovered in Varnish HTTP Cache 4.0.1 through 4.0.4, 4.1.0 through 4.1.7, 5.0.0, and 5.1.0 through 5.1.2
7.5
CVSS
2.4%
EPSS
No
On KEV
Description
An issue was discovered in Varnish HTTP Cache 4.0.1 through 4.0.4, 4.1.0 through 4.1.7, 5.0.0, and 5.1.0 through 5.1.2. A wrong if statement in the varnishd source code means that particular invalid requests from the client can trigger an assert, related to an Integer Overflow. This causes the varnishd worker process to abort and restart, losing the cached contents in the process. An attacker can therefore crash the varnishd worker process on demand and effectively keep it from serving content - a Denial-of-Service attack. The specific source-code filename containing the incorrect statement varies across releases.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VA
Varnish · Varnish-cache
4.0.2; 4.0.3; 4.0.3; 4.0.3; 4.0.3; 4.1.0 · source: NVD
VC
Varnish Cache · Varnish Cache Project
4.0.1; 4.0.2; 4.0.3; 4.0.4; 5.0.0; 5.1.0; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-12425
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-12425
www.debian.org
http://www.debian.org/security/2017/dsa-3924
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1477222
Issue Tracking
https://bugzilla.suse.com/show_bug.cgi?id=1051917
Third Party Advisory
https://github.com/varnishcache/varnish-cache/issues/2379
Mailing List
https://lists.debian.org/debian-security-announce/2017/msg00186.html
Vendor Advisory
https://www.varnish-cache.org/security/VSV00001.html#vsv00001
More from Varnish Cache
9.1
CVE-2022-23959
In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x before 4.1.11r6 and 6.0.x before 6.0.9r4,…
9.1
CVE-2017-8807
vbf_stp_error in bin/varnishd/cache/cache_fetch.c in Varnish HTTP Cache 4.1.x before 4.1.9 and 5.x before 5.2.1 allows remote attackers to obtain sensitive information from…
7.5
CVE-2022-45060
An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x before 7.2.1
7.5
CVE-2022-45059
An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1
7.5
CVE-2022-38150
In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to assert and automatically restart through forged HTTP/1 backend responses