CVE-2017-8807

🗓️ 16 Nov 2017 02:00:00Reported by debianType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 481 Views

Varnish HTTP Cache 4.1.x/5.x before 4.1.9/5.2.1 vbf_stp_error in cache_fetch.c CVE-2017-880

Reporter	Title	Published	Views	Family All 39
FreeBSD	varnish -- information disclosure vulnerability	15 Nov 201700:00	–	freebsd
AlpineLinux	CVE-2017-8807	16 Nov 201702:00	–	alpinelinux
ArchLinux	[ASA-201711-29] varnish: information disclosure	26 Nov 201700:00	–	archlinux
CNVD	Varnish HTTP Cache Information Disclosure Vulnerability	16 Nov 201700:00	–	cnvd
Cvelist	CVE-2017-8807	16 Nov 201702:00	–	cvelist
Debian	[SECURITY] [DSA 4034-1] varnish security update	15 Nov 201712:51	–	debian
Debian	[SECURITY] [DSA 4034-1] varnish security update	15 Nov 201712:51	–	debian
Debian CVE	CVE-2017-8807	16 Nov 201702:00	–	debiancve
Tenable Nessus	Debian DSA-4034-1 : varnish - security update	16 Nov 201700:00	–	nessus
Tenable Nessus	Fedora 26 : varnish (2017-5525b6cb5a)	28 Nov 201700:00	–	nessus

NVD

Node

varnish-cache varnishRange4.1.0–4.1.9

varnish_cache_project varnish_cacheRange5.0.0–5.2.1

Node

debian debian_linuxMatch9.0

[
  {
    "product": "Varnish HTTP Cache 4.1.x before 4.1.9 and 5.x before 5.2.1",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Varnish HTTP Cache 4.1.x before 4.1.9 and 5.x before 5.2.1"
      }
    ]
  }
]

Source	Link
github	www.github.com/varnishcache/varnish-cache/pull/2429
securityfocus	www.securityfocus.com/bid/101886
debian	www.debian.org/security/2017/dsa-4034
bugs	www.bugs.debian.org/881808
varnish-cache	www.varnish-cache.org/security/VSV00002.html
github	www.github.com/varnishcache/varnish-cache/commit/176f8a075a963ffbfa56f1c460c15f6a1a6af5a7

13 May 2026 00:24Current

8.8High risk

Vulners AI Score8.8

CVSS 26.4

CVSS 3.19.1

EPSS0.01258

CWE-119