Lucene search

K
osvGoogleOSV:RLSA-2024:1691
HistoryMay 10, 2024 - 2:32 p.m.

Important: varnish security update

2024-05-1014:32:38
Google
osv.dev
3
varnish cache
http accelerator
security fix
http/2 broken window attack
denial of service
cve
references
software

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don’t have to create the same web page over and over again, giving the website a significant speed up.

Security Fix(es):

  • varnish: HTTP/2 Broken Window Attack may result in denial of service (CVE-2024-30156)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%