CVE:CVE-2022-23959
CNNVD:CNNVD-202201-2346
Varnish Cache是一套反向网站缓存服务器。
Varnish Cache 存在安全漏洞，攻击者可利用该漏洞触发HTTP/1连接请求走私。
solution:Upgrade varnish-software varnich_cache to a higher version than 6.6.2,4.1.11r6,4.1,and avoid the version [1.0.0,6.6.2),[4.1.1,4.1.11r6),4.1; Upgrade varnish-software varnish_cache to a higher version than 6.0.10,and avoid the version [6.0.0,6.0.10); Upgrade varnish-software varnish_cache_plus to a higher version than 6.0.9r4,and avoid the version [6.0.0,6.0.9r4); Upgrade varnish_cache_project varnish_cache to a higher version than 7.0.2,and avoid the version [7.0.0,7.0.2); Upgrade fedoraproject fedora to a higher version than 35,and avoid the version 35; Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0