Lucene search

K
osvGoogleOSV:CVE-2024-30156
HistoryMar 24, 2024 - 1:15 a.m.

CVE-2024-30156

2024-03-2401:15:45
Google
osv.dev
4
varnish cache
varnish enterprise
broke window attack
cve-2024-30156
http/2
credits exhaustion

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, allows credits exhaustion for an HTTP/2 connection control flow window, aka a Broke Window Attack.

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%