Lucene search

K
osvGoogleOSV:ALSA-2024:1690
HistoryApr 08, 2024 - 12:00 a.m.

Important: varnish security update

2024-04-0800:00:00
Google
osv.dev
11
varnish cache
http/2
broken window attack
denial of service
cve-2024-30156
security update
software

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.7%

Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don’t have to create the same web page over and over again, giving the website a significant speed up.

Security Fix(es):

  • varnish: HTTP/2 Broken Window Attack may result in denial of service (CVE-2024-30156)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.7%