Unrated severityNVD Advisory· Published Nov 9, 2022· Updated May 1, 2025

CVE-2022-45059

Description

An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smuggling attack can be performed on Varnish Cache servers by requesting that certain headers are made hop-by-hop, preventing the Varnish Cache servers from forwarding critical headers to the backend.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Varnish Cache/Varnish Cachedescription
Varnish Software/Varnish Cachellm-fuzzy
Range: >=7.0.0 <7.1.2, >=7.2.0 <7.2.1
osv-coords12 versions
pkg:bitnami/varnish pkg:deb/ubuntu/varnish@3.0.5-2ubuntu0.1?arch=source&distro=esm-infra-legacy/trusty pkg:deb/ubuntu/varnish@4.1.1-1ubuntu0.2+esm1?arch=source&distro=esm-apps/xenial pkg:deb/ubuntu/varnish@5.2.1-1ubuntu0.1?arch=source&distro=esm-apps/bionic pkg:deb/ubuntu/varnish@6.2.1-2ubuntu0.2?arch=source&distro=focal pkg:deb/ubuntu/varnish@6.6.1-1ubuntu0.2?arch=source&distro=jammy pkg:deb/ubuntu/varnish@7.1.1-1.1ubuntu1?arch=source&distro=noble pkg:deb/ubuntu/varnish@7.5.0-3?arch=source&distro=oracular pkg:rpm/opensuse/varnish&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/varnish&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/vinyl-cache&distro=openSUSE%20Tumbleweed pkg:rpm/suse/varnish&distro=SUSE%20Package%20Hub%2015%20SP4
>= 7.0.0, < 7.1.2+ 11 more
- (no CPE)range: >= 7.0.0, < 7.1.2
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: < 7.2.1-bp154.2.9.1
- (no CPE)range: < 7.2.1-1.1
- (no CPE)range: < 9.0.0-1.1
- (no CPE)range: < 7.2.1-bp154.2.9.1

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2022-45059

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions