CVE-2019-20637

An issue was discovered in Varnish Cache before 6.0.5 LTS, 6.1.x and 6.2.x before 6.2.2, and 6.3.x before 6.3.1. It does not clear a pointer between the handling of one client request and the next request within the same connection. This sometimes causes information to be disclosed from the connection workspace, such as data structures associated with previous requests within this connection or VCL-related temporary headers.

• CWE-212

• http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00026.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00031.htmlMailing List, Third Party Advisory
• http://varnish-cache.org/security/VSV00004.html#vsv00004Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00026.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00031.htmlMailing List, Third Party Advisory
• http://varnish-cache.org/security/VSV00004.html#vsv00004Vendor Advisory

Published

Apr 8, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-20631An issue was discovered in libgpac.a in GPAC before 0.8.0, a…5.5
• CVE-2019-20632An issue was discovered in libgpac.a in GPAC before 0.8.0, a…5.5
• CVE-2019-20633GNU patch through 2.7.6 contains a free(p_line[p_end]) Doubl…5.5
• CVE-2019-20634An issue was discovered in Proofpoint Email Protection throu…3.7
• CVE-2019-20635codeBeamer before 9.5.0-RC3 does not properly restrict the a…6.1
• CVE-2019-20636In the Linux kernel before 5.4.12, drivers/input/input.c has…6.7
• CVE-2019-20638NETGEAR MR1100 devices before 12.06.08.00 are affected by di…6.5
• CVE-2019-20639Certain NETGEAR devices are affected by stored XSS. This aff…4.8
• CVE-2019-2064In libxaac, there is a possible out of bounds write due to a…8.8
• CVE-2019-20640Certain NETGEAR devices are affected by a stack-based buffer…8.8
• CVE-2019-20641NETGEAR RAX40 devices before 1.0.3.64 are affected by lack o…8.8
• CVE-2019-20642NETGEAR RAX40 devices before 1.0.3.64 are affected by authen…8