Candidate: CVE-2013-4484 PublicDate: 2013-11-01 02:55:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4484 https://www.varnish-cache.org/trac/ticket/1367 http://archives.neohapsis.com/archives/bugtraq/current/0158.html Description: Varnish before 3.0.5 allows remote attackers to cause a denial of service (child-process crash and temporary caching outage) via a GET request with trailing whitespace characters and no URI. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: Patches_varnish: upstream_varnish: released (3.0.5) lucid_varnish: ignored (reached end-of-life) precise_varnish: ignored (reached end-of-life) precise/esm_varnish: DNE (precise was needed) quantal_varnish: ignored (reached end-of-life) raring_varnish: ignored (reached end-of-life) saucy_varnish: ignored (reached end-of-life) trusty_varnish: not-affected (3.0.5-2) trusty/esm_varnish: not-affected (3.0.5-2) utopic_varnish: not-affected (3.0.5-2) vivid_varnish: not-affected (3.0.5-2) vivid/stable-phone-overlay_varnish: DNE vivid/ubuntu-core_varnish: DNE wily_varnish: not-affected (3.0.5-2) xenial_varnish: not-affected (3.0.5-2) yakkety_varnish: not-affected (3.0.5-2) zesty_varnish: not-affected (3.0.5-2) devel_varnish: not-affected (3.0.5-2)