Lucene search
PRIOn knowledge basePRION:CVE-2017-8807HistoryNov 16, 2017 - 2:29 a.m.
Design/Logic Flaw
2017-11-1602:29:00
PRIOn knowledge base
www.prio-n.com
8
vbf_stp_error in bin/varnishd/cache/cache_fetch.c in Varnish HTTP Cache 4.1.x before 4.1.9 and 5.x before 5.2.1 allows remote attackers to obtain sensitive information from process memory because a VFP_GetStorage buffer is larger than intended in certain circumstances involving -sfile Stevedore transient objects.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 9.0 | |
| varnish | ge | 4.1.0 | |
| varnish | lt | 4.1.9 | |
| varnish_cache | ge | 5.0.0 | |
| varnish_cache | lt | 5.2.1 |
Related
mageia
mageia
Updated varnish packages fix security vulnerability
2017-12-02 02:13:21
veracode
veracode
Information Disclosure
2020-05-10 23:28:05
nessus
nessus
Debian DSA-4034-1 : varnish - security update
2017-11-16 00:00:00
Fedora 26 : varnish (2017-5525b6cb5a)
2017-11-28 00:00:00
Ubuntu 16.04 ESM : Varnish vulnerability (USN-4824-1)
2023-10-20 00:00:00
ubuntucve
ubuntucve
CVE-2017-8807
2017-11-16 00:00:00
osv
osv
varnish - security update
2017-11-15 00:00:00
varnish vulnerability
2021-03-15 22:04:55
CVE-2017-8807
2017-11-16 02:29:05
cvelist
cvelist
CVE-2017-8807
2017-11-16 02:00:00
freebsd
freebsd
varnish -- information disclosure vulnerability
2017-11-15 00:00:00
debiancve
debiancve
CVE-2017-8807
2017-11-16 02:29:05
openvas
openvas
Fedora Update for varnish FEDORA-2017-72b50be8d4
2017-11-28 00:00:00
Ubuntu: Security Advisory (USN-4824-1)
2023-01-27 00:00:00
Debian: Security Advisory (DSA-4034-1)
2017-11-14 00:00:00
cve
cve
CVE-2017-8807
2017-11-16 02:29:05
fedora
fedora
[SECURITY] Fedora 26 Update: varnish-5.1.3-4.fc26
2017-11-28 00:50:34
[SECURITY] Fedora 25 Update: varnish-5.0.0-5.fc25
2017-11-28 04:12:08
[SECURITY] Fedora 27 Update: varnish-5.1.3-4.fc27
2017-11-27 21:25:46
redhatcve
redhatcve
CVE-2017-8807
2017-11-15 15:24:54
alpinelinux
alpinelinux
CVE-2017-8807
2017-11-16 02:29:05
nvd
nvd
CVE-2017-8807
2017-11-16 02:29:05
ubuntu
ubuntu
Varnish vulnerability
2021-03-15 00:00:00
archlinux
archlinux
[ASA-201711-29] varnish: information disclosure
2017-11-26 00:00:00
debian
debian
[SECURITY] [DSA 4034-1] varnish security update
2017-11-15 12:51:26
[SECURITY] [DSA 4034-1] varnish security update
2017-11-15 12:51:26