REDHAT-BUG-2364235: High severity varnish cache vulnerability
This vulnerability may allow for request smuggling attacks, potentially resulting in an unspecified system caching incorrect content.
The bug is an error in how to parse a chunked message body. The RFC tells to use only CRLF sequence to end a line: https://www.rfc-editor.org/rfc/rfc9112.html#name-chunked-transfer-coding However, Varnish has up until now mistakenly treated white-spaces as line ending as well. This allows a client to construct a HTTP/1 request to smuggle another malicious request in the body of the first request. When this is used against an endpoint that is blindly forwarding HTTP requests, it can lead to ways for this client to abuse this behavior of Varnish.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2364235?
The severity of REDHAT-BUG-2364235 is classified as a potential request smuggling vulnerability.
How do I fix REDHAT-BUG-2364235?
To mitigate REDHAT-BUG-2364235, ensure that your Varnish caching software is updated to the latest version that resolves this issue.
What are the consequences of REDHAT-BUG-2364235?
REDHAT-BUG-2364235 could lead to incorrect content being cached, which may confuse users and compromise data integrity.
Which software is affected by REDHAT-BUG-2364235?
REDHAT-BUG-2364235 affects Varnish Cache software.
Is there a workaround for REDHAT-BUG-2364235?
Currently, the recommended action for REDHAT-BUG-2364235 is to upgrade your Varnish software to the patched version.