Varnish Cache: denial of service via lingering HTTP/1 sessions

A denial of service vulnerability has been discovered in Varnish Cache, exploitable via HTTP/1 Lingering Sessions, allowing an attacker to trigger a fatal server error.

Published 5sem1 sourceNotable

Lire en français

≈ 23sSpeed

The fact

The cache's HTTP connection management mechanism contains a critical flaw.

Administrators must update Varnish Cache to restore stability and availability of their web services.

Click the link to read an article on the topic:

GlobalSecurityMag

Explore this topic

Varnish #Varnish Cache #déni de service #HTTP/1 #sessions prolongées

What if you saw the whole news differently?Factae cross-checks hundreds of sources worldwide to keep only the fact, no opinion. Explore the front page.

Follow topic →

Auto-synthesis from 1 media source · identified on June 14, 2026

← Back to home

The fact

Read more

Varnish Cache: write access vulnerability via HTTP request parsing

Vulnérabilités dans Varnish Cache et Vinyl Cache via HTTP/2 Request Smuggling

Nginx: new security vulnerability discovered and disclosed

Vulnérabilité de déni de service dans Coturn via Attribute Parsing identifiée en 2026

Critical Security Vulnerability in Nginx UI Patched

libsoup: denial of service vulnerability discovered