CVE-2013-4484
mediumPriorität · verfolgen · 21EPSS 0.032 · 88. PerzentilEURUUSgrimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
3.24% (88th) EPSS
CVSS 5 · medium
Who says so?
4 sources
cnnvd · enisa_euvd · fstec_bdu · nvd
EPSS · bewertet 2026-10-27
Varnish before 3.0.5 allows remote attackers to cause a denial of service (child-process crash and temporary caching outage) via a GET request with trailing whitespace characters and no URI.
01
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
5.0
010
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
02
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
03
betroffene Produkte (20)
Betroffene Produkte und Versionsbereiche.
- varnish cache project varnish cache≤ 3.0.4nvdUScpe:2.3:a:varnish_cache_project:varnish_cache:*:*:*:*:*:*:*:*
- varnish cache project varnish cache= 2.0.1nvdUScpe:2.3:a:varnish_cache_project:varnish_cache:*:*:*:*:*:*:*:*
- varnish cache project varnish cache= 2.0.2nvdUScpe:2.3:a:varnish_cache_project:varnish_cache:*:*:*:*:*:*:*:*
- varnish cache project varnish cache= 2.0.3nvdUScpe:2.3:a:varnish_cache_project:varnish_cache:*:*:*:*:*:*:*:*
- varnish cache project varnish cache= 2.0.4nvdUScpe:2.3:a:varnish_cache_project:varnish_cache:*:*:*:*:*:*:*:*
- varnish cache project varnish cache= 2.0.5nvdUScpe:2.3:a:varnish_cache_project:varnish_cache:*:*:*:*:*:*:*:*
- varnish cache project varnish cache= 2.0.6nvdUScpe:2.3:a:varnish_cache_project:varnish_cache:*:*:*:*:*:*:*:*
- varnish cache project varnish cache= 2.1.0nvdUScpe:2.3:a:varnish_cache_project:varnish_cache:*:*:*:*:*:*:*:*
- varnish cache project varnish cache= 2.1.1nvdUScpe:2.3:a:varnish_cache_project:varnish_cache:*:*:*:*:*:*:*:*
- varnish cache project varnish cache= 2.1.2nvdUScpe:2.3:a:varnish_cache_project:varnish_cache:*:*:*:*:*:*:*:*
- varnish cache project varnish cache= 2.1.3nvdUScpe:2.3:a:varnish_cache_project:varnish_cache:*:*:*:*:*:*:*:*
- varnish cache project varnish cache= 2.1.4nvdUScpe:2.3:a:varnish_cache_project:varnish_cache:*:*:*:*:*:*:*:*
- varnish cache project varnish cache= 2.1.5nvdUScpe:2.3:a:varnish_cache_project:varnish_cache:*:*:*:*:*:*:*:*
- varnish cache project varnish cache= 3.0.0nvdUScpe:2.3:a:varnish_cache_project:varnish_cache:*:*:*:*:*:*:*:*
- varnish cache project varnish cache= 3.0.1nvdUScpe:2.3:a:varnish_cache_project:varnish_cache:*:*:*:*:*:*:*:*
- varnish cache project varnish cache= 3.0.2nvdUScpe:2.3:a:varnish_cache_project:varnish_cache:*:*:*:*:*:*:*:*
- varnish cache project varnish cache= 3.0.3nvdUScpe:2.3:a:varnish_cache_project:varnish_cache:*:*:*:*:*:*:*:*
04
auch bekannt als (6)
Weitere Namen und Kennungen dieser Entität.
05
quellen
Welche Quellen diesen Datensatz belegen und wann.
07
Referenzen (24)
Externe Belege — Patches, Meldungen, Analysen.
- http://archives.neohapsis.com/archives/bugtraq/2013-10/0158.htmlcnnvd
- http://lists.opensuse.org/opensuse-updates/2013-11/msg00029.htmlcnnvd
- http://lists.opensuse.org/opensuse-updates/2013-11/msg00033.htmlcnnvd
- http://secunia.com/advisories/55452cnnvd
- http://secunia.com/advisories/55746cnnvd
- http://www.openwall.com/lists/oss-security/2013/10/30/5cnnvd
- https://www.debian.org/security/2012/dsa-2814cnnvd
- https://www.varnish-cache.org/trac/ticket/1367cnnvd
scry
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan