CVE-2020-11653

An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3.x before 6.3.2. It occurs when communication with a TLS termination proxy uses PROXY version 2. There can be an assertion failure and daemon restart, which causes a performance loss.

References

Affected packages

Git /

Affected ranges

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-11653.json"

unresolved_ranges

[
    {
        "events":  [
            {
                "introduced":  "6.1.0"
            },
            {
                "fixed":  "6.2.3"
            }
        ]
    },
    {
        "events":  [
            {
                "introduced":  "6.3.0"
            },
            {
                "fixed":  "6.3.2"
            }
        ]
    },
    {
        "events":  [
            {
                "introduced":  "6.0.0"
            },
            {
                "fixed":  "6.0.6"
            }
        ]
    },
    {
        "events":  [
            {
                "introduced":  "0"
            },
            {
                "last_affected":  "15.0-sp1"
            }
        ]
    },
    {
        "events":  [
            {
                "introduced":  "0"
            },
            {
                "last_affected":  "15.1"
            }
        ]
    },
    {
        "events":  [
            {
                "introduced":  "0"
            },
            {
                "last_affected":  "10.0"
            }
        ]
    }
]