What’s Vulnerable › Vulnerabilities

CVE-2013-4484

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2013-11-01 · updated 2026-06-16
• Weakness: CWE-119

Description

Varnish before 3.0.5 allows remote attackers to cause a denial of service (child-process crash and temporary caching outage) via a GET request with trailing whitespace characters and no URI.

Affected products

• Varnish-Cache Varnish: 2.0.0
• Varnish Cache Project Varnish Cache: through 3.0.4; 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6 (+12)

References

• http://archives.neohapsis.com/archives/bugtraq/2013-10/0158.html
• http://lists.opensuse.org/opensuse-updates/2013-11/msg00029.html
• http://lists.opensuse.org/opensuse-updates/2013-11/msg00033.html
• http://secunia.com/advisories/55452
• http://secunia.com/advisories/55746
• http://www.debian.org/security/2012/dsa-2814
• http://www.openwall.com/lists/oss-security/2013/10/30/5
• https://www.varnish-cache.org/trac/ticket/1367
• http://archives.neohapsis.com/archives/bugtraq/2013-10/0158.html
• http://lists.opensuse.org/opensuse-updates/2013-11/msg00029.html
• http://lists.opensuse.org/opensuse-updates/2013-11/msg00033.html
• http://secunia.com/advisories/55452

Get alerted when CVE-2013-4484 or the next vulnerability affects your stack