VDB
BDU%3A2019-03642
BDU%3A2019-03642
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость синтаксического анализа HTTP/1 HTTP-ускорителя Varnish, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fedora Project, Red Hat Inc., Novell Inc., Сообщество свободного программного обеспечения, Varnish Software | Fedora, Red Hat Enterprise Linux, OpenSUSE Leap, Debian GNU/Linux, Varnish, Red Hat Software Collections |
Timeline
- Oct 16, 2019 CVE Published
- Mar 23, 2021 CVE Updated
- Mar 18, 2026 Security Advisory
- Mar 18, 2026 Security Advisory
References
- https://varnish-cache.org/security/VSV00003.html url
- https://nvd.nist.gov/vuln/detail/CVE-2019-15892 url
- https://security-tracker.debian.org/tracker/CVE-2019-15892 url
- https://access.redhat.com/security/cve/CVE-2019-15892 url
- https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00069.html url
- https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00089.html url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3OEOCYRU43TWEU2C65F3D6GK64MSWNNK/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DBAQF6UDRSTURGINIMSMLJR4PTDYWA7C/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KLSF54TDJWJLINIFEW5V5BKDNY5EQRR3/ url