Vulnerability in Varnish Cache Affects Multiple Versions
CVE-2022-38150

7.5HIGH

Key Information:

Vendor: Varnish Cache Project
Status: Varnish Cache
Vendor: CVE Published:; 11 August 2022

🔔 Create Varnish Cache Project Vulnerability Alert

What is CVE-2022-38150?

In certain versions of Varnish Cache, a vulnerability exists that allows attackers to trigger a server assertion and cause an automatic restart. This is achieved through the manipulation of the status line in forged HTTP/1 backend responses. The issue has been addressed in subsequent updates, namely versions 7.0.3 and 7.1.1, which include the necessary patches to prevent exploitation. It's essential for users to upgrade to these versions to ensure the stability and security of their server.