CVE-2019-20637

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An issue was discovered in Varnish Cache before 6.0.5 LTS, 6.1.x and 6.2.x before 6.2.2, and 6.3.x before 6.3.1. It does not clear a pointer between the handling of one client request and the next request within the same connection. This sometimes causes information to be disclosed from the connection workspace, such as data structures associated with previous requests within this connection or VCL-related temporary headers.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-212

Affected software

No affected versions have been published.

Timeline

Published: Apr 8, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-206386.5NETGEAR MR1100 devices before 12.06.08.00 are affected by disclosure of administrative credentials.CVE-2019-206394.8Certain NETGEAR devices are affected by stored XSS. This affects RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK50 before 2.3.5.30.CVE-2019-20648.8In libxaac, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no addition CVE-2019-206408.8Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.76, D6 CVE-2019-206418.8NETGEAR RAX40 devices before 1.0.3.64 are affected by lack of access control at the function level.CVE-2019-206428.0NETGEAR RAX40 devices before 1.0.3.64 are affected by authentication bypass.CVE-2019-206437.5NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of sensitive information.CVE-2019-206444.8NETGEAR RAX40 devices before 1.0.3.62 are affected by stored XSS.CVE-2019-206454.8NETGEAR RAX40 devices before 1.0.3.62 are affected by stored XSS.CVE-2019-206469.8NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of administrative credentials.CVE-2019-206475.7NETGEAR RAX40 devices before 1.0.3.64 are affected by denial of service.CVE-2019-206483.5NETGEAR RN42400 devices before 6.10.2 are affected by incorrect configuration of security settings.