{"id":"CVE-2022-23959","state":"PUBLISHED","title":"In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x before 4.1.11r6 and 6.0.x before 6.0.9r4, req","description":"In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x before 4.1.11r6 and 6.0.x before 6.0.9r4, request smuggling can occur for HTTP/1 connections.","publishedAt":"2022-01-26T00:38:55.000Z","updatedAt":"2024-08-03T03:59:23.263Z","severity":null,"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["https://varnish-cache.org/security/VSV00008.html","https://docs.varnish-software.com/security/VSV00008/","https://lists.debian.org/debian-lts-announce/2022/02/msg00014.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UMMDMQWNAE3BTSZUHXQHVAMZC5TLHLYT/","https://www.debian.org/security/2022/dsa-5088"],"weaknesses":[],"ingestedAt":"2026-10-29T19:49:40.939Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/23xxx/CVE-2022-23959.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-23959","state":"PUBLISHED","datePublished":"2022-01-26T00:38:55.000Z","dateUpdated":"2024-08-03T03:59:23.263Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2022-01-26T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x before 4.1.11r6 and 6.0.x before 6.0.9r4, request smuggling can occur for HTTP/1 connections."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"https://varnish-cache.org/security/VSV00008.html","tags":["x_refsource_MISC"]},{"url":"https://docs.varnish-software.com/security/VSV00008/","tags":["x_refsource_MISC"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00014.html","name":"[debian-lts-announce] 20220214 [SECURITY] [DLA 2920-1] varnish security update","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UMMDMQWNAE3BTSZUHXQHVAMZC5TLHLYT/","name":"FEDORA-2022-2f14ec7663","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"https://www.debian.org/security/2022/dsa-5088","name":"DSA-5088","tags":["vendor-advisory","x_refsource_DEBIAN"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"mitre","dateUpdated":"2022-03-04T12:06:15.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2022-23959","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x before 4.1.11r6 and 6.0.x before 6.0.9r4, request smuggling can occur for HTTP/1 connections."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"https://varnish-cache.org/security/VSV00008.html","refsource":"MISC","url":"https://varnish-cache.org/security/VSV00008.html"},{"name":"https://docs.varnish-software.com/security/VSV00008/","refsource":"MISC","url":"https://docs.varnish-software.com/security/VSV00008/"},{"name":"[debian-lts-announce] 20220214 [SECURITY] [DLA 2920-1] varnish security update","refsource":"MLIST","url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00014.html"},{"name":"FEDORA-2022-2f14ec7663","refsource":"FEDORA","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UMMDMQWNAE3BTSZUHXQHVAMZC5TLHLYT/"},{"name":"DSA-5088","refsource":"DEBIAN","url":"https://www.debian.org/security/2022/dsa-5088"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://varnish-cache.org/security/VSV00008.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://docs.varnish-software.com/security/VSV00008/","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00014.html","name":"[debian-lts-announce] 20220214 [SECURITY] [DLA 2920-1] varnish security update","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UMMDMQWNAE3BTSZUHXQHVAMZC5TLHLYT/","name":"FEDORA-2022-2f14ec7663","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://www.debian.org/security/2022/dsa-5088","name":"DSA-5088","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T03:59:23.263Z"}}]}}}