Lucene search

K
cve[email protected]CVE-2024-30156
HistoryMar 24, 2024 - 1:15 a.m.

CVE-2024-30156

2024-03-2401:15:45
web.nvd.nist.gov
26
varnish cache
varnish enterprise
cve-2024-30156
http/2
broke window attack
security vulnerability

7.4 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.7%

Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, allows credits exhaustion for an HTTP/2 connection control flow window, aka a Broke Window Attack.

7.4 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.7%