NetSight
IP …
high7.5

CVE-2020-11653

An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3.x before 6.3.2.

Impact

An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3.x before 6.3.2. It occurs when communication with a TLS termination proxy uses PROXY version 2. There can be an assertion failure and daemon restart, which causes a performance loss.

Affected products

VendorProductAffected versions
Varnish-CacheVarnish Cache
from 6.1.0 before 6.2.3
from 6.3.0 before 6.3.2
Varnish-SoftwareVarnish Cache
from 6.0.0 before 6.0.6
OpensuseBackports Sle
Version 15.0
OpensuseLeap
Version 15.1
DebianDebian Linux
Version 10.0

Weakness classification

CWE-617

References