Lucene search

K
nvd[email protected]NVD:CVE-2024-30156
HistoryMar 24, 2024 - 1:15 a.m.

CVE-2024-30156

2024-03-2401:15:45
web.nvd.nist.gov
varnish cache
broke window attack
cve-2024-30156
http/2
varnish enterprise 6

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, allows credits exhaustion for an HTTP/2 connection control flow window, aka a Broke Window Attack.

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%