ALPINE-CVE-2022-23959
- Source
- https://security.alpinelinux.org/vuln/CVE-2022-23959
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2022-23959.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/ALPINE-CVE-2022-23959
- Upstream
- Published
- 2022-01-26T01:15:07Z
- Modified
- 2025-09-26T00:20:52.158768Z
- Severity
-
- 9.1 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
- Summary
- [none]
- Details
-
In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x before 4.1.11r6 and 6.0.x before 6.0.9r4, request smuggling can occur for HTTP/1 connections.
- References
Affected packages
Alpine:v3.12
varnish
Package
- Name
- varnish
- Purl
- pkg:apk/alpine/varnish?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed6.5.2-r1
Affected versions
2.*
2.1.5-r0
3.*
3.0.0-r0
3.0.0-r1
3.0.0-r2
3.0.2-r0
3.0.2-r1
3.0.2-r2
3.0.2-r3
3.0.2-r4
3.0.2-r5
3.0.2-r6
3.0.2-r7
3.0.3-r0
3.0.3-r1
3.0.3-r2
3.0.4-r0
3.0.4-r1
3.0.4-r2
3.0.4-r3
3.0.4-r4
3.0.5-r0
3.0.5-r1
4.*
4.0.0-r0
4.0.0-r1
4.0.0-r2
4.0.1-r0
4.0.2-r0
4.0.2-r1
4.0.2-r2
4.0.3-r0
4.0.3-r1
4.1.0-r0
4.1.0-r1
4.1.0-r2
4.1.1-r0
4.1.2-r0
4.1.2-r1
4.1.2-r2
4.1.2-r3
4.1.3-r0
5.*
5.1.2-r0
5.1.2-r1
5.1.3-r0
5.2.0-r0
5.2.1-r0
6.*
6.0.0-r0
6.0.0-r1
6.0.1-r0
6.1.0-r0
6.1.1-r0
6.2.0-r0
6.2.0-r1
6.2.1-r0
6.3.0-r0
6.3.1-r0
6.3.1-r1
6.3.2-r0
6.4.0-r0
6.5.2-r0
Alpine:v3.13
varnish
Package
- Name
- varnish
- Purl
- pkg:apk/alpine/varnish?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed6.5.2-r1
Affected versions
2.*
2.1.5-r0
3.*
3.0.0-r0
3.0.0-r1
3.0.0-r2
3.0.2-r0
3.0.2-r1
3.0.2-r2
3.0.2-r3
3.0.2-r4
3.0.2-r5
3.0.2-r6
3.0.2-r7
3.0.3-r0
3.0.3-r1
3.0.3-r2
3.0.4-r0
3.0.4-r1
3.0.4-r2
3.0.4-r3
3.0.4-r4
3.0.5-r0
3.0.5-r1
4.*
4.0.0-r0
4.0.0-r1
4.0.0-r2
4.0.1-r0
4.0.2-r0
4.0.2-r1
4.0.2-r2
4.0.3-r0
4.0.3-r1
4.1.0-r0
4.1.0-r1
4.1.0-r2
4.1.1-r0
4.1.2-r0
4.1.2-r1
4.1.2-r2
4.1.2-r3
4.1.3-r0
5.*
5.1.2-r0
5.1.2-r1
5.1.3-r0
5.2.0-r0
5.2.1-r0
6.*
6.0.0-r0
6.0.0-r1
6.0.1-r0
6.1.0-r0
6.1.1-r0
6.2.0-r0
6.2.0-r1
6.2.1-r0
6.3.0-r0
6.3.1-r0
6.3.1-r1
6.3.2-r0
6.4.0-r0
6.5.1-r0
6.5.2-r0
Alpine:v3.14
varnish
Package
- Name
- varnish
- Purl
- pkg:apk/alpine/varnish?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed6.6.2-r0
Affected versions
2.*
2.1.5-r0
3.*
3.0.0-r0
3.0.0-r1
3.0.0-r2
3.0.2-r0
3.0.2-r1
3.0.2-r2
3.0.2-r3
3.0.2-r4
3.0.2-r5
3.0.2-r6
3.0.2-r7
3.0.3-r0
3.0.3-r1
3.0.3-r2
3.0.4-r0
3.0.4-r1
3.0.4-r2
3.0.4-r3
3.0.4-r4
3.0.5-r0
3.0.5-r1
4.*
4.0.0-r0
4.0.0-r1
4.0.0-r2
4.0.1-r0
4.0.2-r0
4.0.2-r1
4.0.2-r2
4.0.3-r0
4.0.3-r1
4.1.0-r0
4.1.0-r1
4.1.0-r2
4.1.1-r0
4.1.2-r0
4.1.2-r1
4.1.2-r2
4.1.2-r3
4.1.3-r0
5.*
5.1.2-r0
5.1.2-r1
5.1.3-r0
5.2.0-r0
5.2.1-r0
6.*
6.0.0-r0
6.0.0-r1
6.0.1-r0
6.1.0-r0
6.1.1-r0
6.2.0-r0
6.2.0-r1
6.2.1-r0
6.3.0-r0
6.3.1-r0
6.3.1-r1
6.3.2-r0
6.4.0-r0
6.5.1-r0
6.6.0-r0
6.6.1-r0
Alpine:v3.15
varnish
Package
- Name
- varnish
- Purl
- pkg:apk/alpine/varnish?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed7.0.2-r0
Affected versions
2.*
2.1.5-r0
3.*
3.0.0-r0
3.0.0-r1
3.0.0-r2
3.0.2-r0
3.0.2-r1
3.0.2-r2
3.0.2-r3
3.0.2-r4
3.0.2-r5
3.0.2-r6
3.0.2-r7
3.0.3-r0
3.0.3-r1
3.0.3-r2
3.0.4-r0
3.0.4-r1
3.0.4-r2
3.0.4-r3
3.0.4-r4
3.0.5-r0
3.0.5-r1
4.*
4.0.0-r0
4.0.0-r1
4.0.0-r2
4.0.1-r0
4.0.2-r0
4.0.2-r1
4.0.2-r2
4.0.3-r0
4.0.3-r1
4.1.0-r0
4.1.0-r1
4.1.0-r2
4.1.1-r0
4.1.2-r0
4.1.2-r1
4.1.2-r2
4.1.2-r3
4.1.3-r0
5.*
5.1.2-r0
5.1.2-r1
5.1.3-r0
5.2.0-r0
5.2.1-r0
6.*
6.0.0-r0
6.0.0-r1
6.0.1-r0
6.1.0-r0
6.1.1-r0
6.2.0-r0
6.2.0-r1
6.2.1-r0
6.3.0-r0
6.3.1-r0
6.3.1-r1
6.3.2-r0
6.4.0-r0
6.5.1-r0
6.6.0-r0
6.6.1-r0
6.6.1-r1
7.*
7.0.0-r0
Alpine:v3.16
varnish
Package
- Name
- varnish
- Purl
- pkg:apk/alpine/varnish?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed7.0.2-r0
Affected versions
2.*
2.1.5-r0
3.*
3.0.0-r0
3.0.0-r1
3.0.0-r2
3.0.2-r0
3.0.2-r1
3.0.2-r2
3.0.2-r3
3.0.2-r4
3.0.2-r5
3.0.2-r6
3.0.2-r7
3.0.3-r0
3.0.3-r1
3.0.3-r2
3.0.4-r0
3.0.4-r1
3.0.4-r2
3.0.4-r3
3.0.4-r4
3.0.5-r0
3.0.5-r1
4.*
4.0.0-r0
4.0.0-r1
4.0.0-r2
4.0.1-r0
4.0.2-r0
4.0.2-r1
4.0.2-r2
4.0.3-r0
4.0.3-r1
4.1.0-r0
4.1.0-r1
4.1.0-r2
4.1.1-r0
4.1.2-r0
4.1.2-r1
4.1.2-r2
4.1.2-r3
4.1.3-r0
5.*
5.1.2-r0
5.1.2-r1
5.1.3-r0
5.2.0-r0
5.2.1-r0
6.*
6.0.0-r0
6.0.0-r1
6.0.1-r0
6.1.0-r0
6.1.1-r0
6.2.0-r0
6.2.0-r1
6.2.1-r0
6.3.0-r0
6.3.1-r0
6.3.1-r1
6.3.2-r0
6.4.0-r0
6.5.1-r0
6.6.0-r0
6.6.1-r0
6.6.1-r1
7.*
7.0.0-r0
7.0.1-r0
7.0.1-r1
Alpine:v3.17
varnish
Package
- Name
- varnish
- Purl
- pkg:apk/alpine/varnish?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed7.0.2-r0
Affected versions
2.*
2.1.5-r0
3.*
3.0.0-r0
3.0.0-r1
3.0.0-r2
3.0.2-r0
3.0.2-r1
3.0.2-r2
3.0.2-r3
3.0.2-r4
3.0.2-r5
3.0.2-r6
3.0.2-r7
3.0.3-r0
3.0.3-r1
3.0.3-r2
3.0.4-r0
3.0.4-r1
3.0.4-r2
3.0.4-r3
3.0.4-r4
3.0.5-r0
3.0.5-r1
4.*
4.0.0-r0
4.0.0-r1
4.0.0-r2
4.0.1-r0
4.0.2-r0
4.0.2-r1
4.0.2-r2
4.0.3-r0
4.0.3-r1
4.1.0-r0
4.1.0-r1
4.1.0-r2
4.1.1-r0
4.1.2-r0
4.1.2-r1
4.1.2-r2
4.1.2-r3
4.1.3-r0
5.*
5.1.2-r0
5.1.2-r1
5.1.3-r0
5.2.0-r0
5.2.1-r0
6.*
6.0.0-r0
6.0.0-r1
6.0.1-r0
6.1.0-r0
6.1.1-r0
6.2.0-r0
6.2.0-r1
6.2.1-r0
6.3.0-r0
6.3.1-r0
6.3.1-r1
6.3.2-r0
6.4.0-r0
6.5.1-r0
6.6.0-r0
6.6.1-r0
6.6.1-r1
7.*
7.0.0-r0
7.0.1-r0
7.0.1-r1
Alpine:v3.18
varnish
Package
- Name
- varnish
- Purl
- pkg:apk/alpine/varnish?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed7.0.2-r0
Affected versions
2.*
2.1.5-r0
3.*
3.0.0-r0
3.0.0-r1
3.0.0-r2
3.0.2-r0
3.0.2-r1
3.0.2-r2
3.0.2-r3
3.0.2-r4
3.0.2-r5
3.0.2-r6
3.0.2-r7
3.0.3-r0
3.0.3-r1
3.0.3-r2
3.0.4-r0
3.0.4-r1
3.0.4-r2
3.0.4-r3
3.0.4-r4
3.0.5-r0
3.0.5-r1
4.*
4.0.0-r0
4.0.0-r1
4.0.0-r2
4.0.1-r0
4.0.2-r0
4.0.2-r1
4.0.2-r2
4.0.3-r0
4.0.3-r1
4.1.0-r0
4.1.0-r1
4.1.0-r2
4.1.1-r0
4.1.2-r0
4.1.2-r1
4.1.2-r2
4.1.2-r3
4.1.3-r0
5.*
5.1.2-r0
5.1.2-r1
5.1.3-r0
5.2.0-r0
5.2.1-r0
6.*
6.0.0-r0
6.0.0-r1
6.0.1-r0
6.1.0-r0
6.1.1-r0
6.2.0-r0
6.2.0-r1
6.2.1-r0
6.3.0-r0
6.3.1-r0
6.3.1-r1
6.3.2-r0
6.4.0-r0
6.5.1-r0
6.6.0-r0
6.6.1-r0
6.6.1-r1
7.*
7.0.0-r0
7.0.1-r0
7.0.1-r1
Alpine:v3.19
varnish
Package
- Name
- varnish
- Purl
- pkg:apk/alpine/varnish?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed7.0.2-r0
Affected versions
2.*
2.1.5-r0
3.*
3.0.0-r0
3.0.0-r1
3.0.0-r2
3.0.2-r0
3.0.2-r1
3.0.2-r2
3.0.2-r3
3.0.2-r4
3.0.2-r5
3.0.2-r6
3.0.2-r7
3.0.3-r0
3.0.3-r1
3.0.3-r2
3.0.4-r0
3.0.4-r1
3.0.4-r2
3.0.4-r3
3.0.4-r4
3.0.5-r0
3.0.5-r1
4.*
4.0.0-r0
4.0.0-r1
4.0.0-r2
4.0.1-r0
4.0.2-r0
4.0.2-r1
4.0.2-r2
4.0.3-r0
4.0.3-r1
4.1.0-r0
4.1.0-r1
4.1.0-r2
4.1.1-r0
4.1.2-r0
4.1.2-r1
4.1.2-r2
4.1.2-r3
4.1.3-r0
5.*
5.1.2-r0
5.1.2-r1
5.1.3-r0
5.2.0-r0
5.2.1-r0
6.*
6.0.0-r0
6.0.0-r1
6.0.1-r0
6.1.0-r0
6.1.1-r0
6.2.0-r0
6.2.0-r1
6.2.1-r0
6.3.0-r0
6.3.1-r0
6.3.1-r1
6.3.2-r0
6.4.0-r0
6.5.1-r0
6.6.0-r0
6.6.1-r0
6.6.1-r1
7.*
7.0.0-r0
7.0.1-r0
7.0.1-r1
Alpine:v3.20
varnish
Package
- Name
- varnish
- Purl
- pkg:apk/alpine/varnish?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed7.0.2-r0
Affected versions
2.*
2.1.5-r0
3.*
3.0.0-r0
3.0.0-r1
3.0.0-r2
3.0.2-r0
3.0.2-r1
3.0.2-r2
3.0.2-r3
3.0.2-r4
3.0.2-r5
3.0.2-r6
3.0.2-r7
3.0.3-r0
3.0.3-r1
3.0.3-r2
3.0.4-r0
3.0.4-r1
3.0.4-r2
3.0.4-r3
3.0.4-r4
3.0.5-r0
3.0.5-r1
4.*
4.0.0-r0
4.0.0-r1
4.0.0-r2
4.0.1-r0
4.0.2-r0
4.0.2-r1
4.0.2-r2
4.0.3-r0
4.0.3-r1
4.1.0-r0
4.1.0-r1
4.1.0-r2
4.1.1-r0
4.1.2-r0
4.1.2-r1
4.1.2-r2
4.1.2-r3
4.1.3-r0
5.*
5.1.2-r0
5.1.2-r1
5.1.3-r0
5.2.0-r0
5.2.1-r0
6.*
6.0.0-r0
6.0.0-r1
6.0.1-r0
6.1.0-r0
6.1.1-r0
6.2.0-r0
6.2.0-r1
6.2.1-r0
6.3.0-r0
6.3.1-r0
6.3.1-r1
6.3.2-r0
6.4.0-r0
6.5.1-r0
6.6.0-r0
6.6.1-r0
6.6.1-r1
7.*
7.0.0-r0
7.0.1-r0
7.0.1-r1
Alpine:v3.21
varnish
Package
- Name
- varnish
- Purl
- pkg:apk/alpine/varnish?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed7.0.2-r0
Affected versions
2.*
2.1.5-r0
3.*
3.0.0-r0
3.0.0-r1
3.0.0-r2
3.0.2-r0
3.0.2-r1
3.0.2-r2
3.0.2-r3
3.0.2-r4
3.0.2-r5
3.0.2-r6
3.0.2-r7
3.0.3-r0
3.0.3-r1
3.0.3-r2
3.0.4-r0
3.0.4-r1
3.0.4-r2
3.0.4-r3
3.0.4-r4
3.0.5-r0
3.0.5-r1
4.*
4.0.0-r0
4.0.0-r1
4.0.0-r2
4.0.1-r0
4.0.2-r0
4.0.2-r1
4.0.2-r2
4.0.3-r0
4.0.3-r1
4.1.0-r0
4.1.0-r1
4.1.0-r2
4.1.1-r0
4.1.2-r0
4.1.2-r1
4.1.2-r2
4.1.2-r3
4.1.3-r0
5.*
5.1.2-r0
5.1.2-r1
5.1.3-r0
5.2.0-r0
5.2.1-r0
6.*
6.0.0-r0
6.0.0-r1
6.0.1-r0
6.1.0-r0
6.1.1-r0
6.2.0-r0
6.2.0-r1
6.2.1-r0
6.3.0-r0
6.3.1-r0
6.3.1-r1
6.3.2-r0
6.4.0-r0
6.5.1-r0
6.6.0-r0
6.6.1-r0
6.6.1-r1
7.*
7.0.0-r0
7.0.1-r0
7.0.1-r1
Alpine:v3.22
varnish
Package
- Name
- varnish
- Purl
- pkg:apk/alpine/varnish?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed7.0.2-r0
Affected versions
2.*
2.1.5-r0
3.*
3.0.0-r0
3.0.0-r1
3.0.0-r2
3.0.2-r0
3.0.2-r1
3.0.2-r2
3.0.2-r3
3.0.2-r4
3.0.2-r5
3.0.2-r6
3.0.2-r7
3.0.3-r0
3.0.3-r1
3.0.3-r2
3.0.4-r0
3.0.4-r1
3.0.4-r2
3.0.4-r3
3.0.4-r4
3.0.5-r0
3.0.5-r1
4.*
4.0.0-r0
4.0.0-r1
4.0.0-r2
4.0.1-r0
4.0.2-r0
4.0.2-r1
4.0.2-r2
4.0.3-r0
4.0.3-r1
4.1.0-r0
4.1.0-r1
4.1.0-r2
4.1.1-r0
4.1.2-r0
4.1.2-r1
4.1.2-r2
4.1.2-r3
4.1.3-r0
5.*
5.1.2-r0
5.1.2-r1
5.1.3-r0
5.2.0-r0
5.2.1-r0
6.*
6.0.0-r0
6.0.0-r1
6.0.1-r0
6.1.0-r0
6.1.1-r0
6.2.0-r0
6.2.0-r1
6.2.1-r0
6.3.0-r0
6.3.1-r0
6.3.1-r1
6.3.2-r0
6.4.0-r0
6.5.1-r0
6.6.0-r0
6.6.1-r0
6.6.1-r1
7.*
7.0.0-r0
7.0.1-r0
7.0.1-r1