Red Hat Security Advisory: rh-varnish6-varnish security update
An update for rh-varnish6-varnish is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-36740US | medium6.5 | — | ||
Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a large Content-Length header for a POST request. This affects Varnish Enterprise 6.0.… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (96)
- Behobenrh-varnish6-varnish-0:6.0.8-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-0:6.0.8-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-0:6.0.8-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-0:6.0.8-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-0:6.0.8-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-0:6.0.8-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-0:6.0.8-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-0:6.0.8-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-0:6.0.8-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-0:6.0.8-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-devel-0:6.0.8-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-devel-0:6.0.8-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-devel-0:6.0.8-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-devel-0:6.0.8-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-devel-0:6.0.8-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-devel-0:6.0.8-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-devel-0:6.0.8-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-docs-0:6.0.8-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-docs-0:6.0.8-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-docs-0:6.0.8-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-docs-0:6.0.8-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-docs-0:6.0.8-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-docs-0:6.0.8-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-docs-0:6.0.8-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-libs-0:6.0.8-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-libs-0:6.0.8-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-libs-0:6.0.8-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-libs-0:6.0.8-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-libs-0:6.0.8-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-libs-0:6.0.8-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-libs-0:6.0.8-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-modules-0:0.15.0-7.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-modules-0:0.15.0-7.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-modules-0:0.15.0-7.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-modules-0:0.15.0-7.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-modules-0:0.15.0-7.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-modules-0:0.15.0-7.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-modules-0:0.15.0-7.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-modules-0:0.15.0-7.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-modules-0:0.15.0-7.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-modules-0:0.15.0-7.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-modules-debuginfo-0:0.15.0-7.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-modules-debuginfo-0:0.15.0-7.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-modules-debuginfo-0:0.15.0-7.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-modules-debuginfo-0:0.15.0-7.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-modules-debuginfo-0:0.15.0-7.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-modules-debuginfo-0:0.15.0-7.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Behobenrh-varnish6-varnish-modules-debuginfo-0:0.15.0-7.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2021:2993 - Workaroundrh-varnish6-varnish-0:6.0.8-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-0:6.0.8-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-0:6.0.8-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-0:6.0.8-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-0:6.0.8-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-0:6.0.8-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-0:6.0.8-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-0:6.0.8-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-0:6.0.8-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-0:6.0.8-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-devel-0:6.0.8-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-devel-0:6.0.8-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-devel-0:6.0.8-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-devel-0:6.0.8-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-devel-0:6.0.8-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-devel-0:6.0.8-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-devel-0:6.0.8-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-docs-0:6.0.8-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-docs-0:6.0.8-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-docs-0:6.0.8-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-docs-0:6.0.8-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-docs-0:6.0.8-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-docs-0:6.0.8-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-docs-0:6.0.8-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-libs-0:6.0.8-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-libs-0:6.0.8-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-libs-0:6.0.8-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-libs-0:6.0.8-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-libs-0:6.0.8-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-libs-0:6.0.8-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-libs-0:6.0.8-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-modules-0:0.15.0-7.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-modules-0:0.15.0-7.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-modules-0:0.15.0-7.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-modules-0:0.15.0-7.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-modules-0:0.15.0-7.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-modules-0:0.15.0-7.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-modules-0:0.15.0-7.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-modules-0:0.15.0-7.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-modules-0:0.15.0-7.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-modules-0:0.15.0-7.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-modules-debuginfo-0:0.15.0-7.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-modules-debuginfo-0:0.15.0-7.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-modules-debuginfo-0:0.15.0-7.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-modules-debuginfo-0:0.15.0-7.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-modules-debuginfo-0:0.15.0-7.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-modules-debuginfo-0:0.15.0-7.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
- Workaroundrh-varnish6-varnish-modules-debuginfo-0:0.15.0-7.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)
This issue can be mitigated by: 1) Disabling HTTP/2 request support by executing: ~~~ sudo varnishadm param.set feature -http2 ~~~ 2) Disabling backend connection reuse on varnish side, the following rule can be inserted into Varnish configuration: ~~~ sub vcl_backend_fetch { set bereq.http.Connection = "close"; } ~~~
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan