Summary
It was discovered that Varnish incorrectly handled certain inputs. A remote
attacker could possibly use this issue to obtain sensitive information.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | varnish | 4.1.1-1ubuntu0.2+esm1 |
Vulnerabilities 1
-
Unscored —
vbf_stp_error in bin/varnishd/cache/cache_fetch.c in Varnish HTTP Cache 4.1.x before 4.1.9 and 5.x before 5.2.1 allows …
References
-
report
https://ubuntu.com/security/CVE-2017-8807