(RHSA-2024:2938) Important: varnish:6 security update

2024-05-2104:57:23

access.redhat.com

varnish cache

http accelerator

security update

denial of service

cve-2024-30156

cvss score

references

broken window attack

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Varnish Cache is a high-performance HTTP accelerator. It stores web pages in
memory so web servers don’t have to create the same web page over and over
again, giving the website a significant speed up.

Security Fix(es):

varnish:6: HTTP/2 Broken Window Attack may result in denial of service
(CVE-2024-30156)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyppc64levarnish-modules< 0.15.0-5.module+el8.3.0+6843+b3b42fccvarnish-modules-0.15.0-5.module+el8.3.0+6843+b3b42fcc.ppc64le.rpm
RedHatanyx86_64varnish-docs< 6.0.6-2.module+el8.4.0+21799+2c737c67.5varnish-docs-6.0.6-2.module+el8.4.0+21799+2c737c67.5.x86_64.rpm
RedHatanyx86_64varnish-modules-debugsource< 0.15.0-5.module+el8.3.0+6843+b3b42fccvarnish-modules-debugsource-0.15.0-5.module+el8.3.0+6843+b3b42fcc.x86_64.rpm
RedHatanyppc64levarnish-modules-debuginfo< 0.15.0-5.module+el8.3.0+6843+b3b42fccvarnish-modules-debuginfo-0.15.0-5.module+el8.3.0+6843+b3b42fcc.ppc64le.rpm
RedHatanyppc64levarnish-devel< 6.0.6-2.module+el8.4.0+21799+2c737c67.5varnish-devel-6.0.6-2.module+el8.4.0+21799+2c737c67.5.ppc64le.rpm
RedHatanyppc64levarnish-docs< 6.0.6-2.module+el8.4.0+21799+2c737c67.5varnish-docs-6.0.6-2.module+el8.4.0+21799+2c737c67.5.ppc64le.rpm
RedHatanyx86_64varnish-modules< 0.15.0-5.module+el8.3.0+6843+b3b42fccvarnish-modules-0.15.0-5.module+el8.3.0+6843+b3b42fcc.x86_64.rpm
RedHatanyx86_64varnish< 6.0.6-2.module+el8.4.0+21799+2c737c67.5varnish-6.0.6-2.module+el8.4.0+21799+2c737c67.5.x86_64.rpm
RedHatanyppc64levarnish-modules-debugsource< 0.15.0-5.module+el8.3.0+6843+b3b42fccvarnish-modules-debugsource-0.15.0-5.module+el8.3.0+6843+b3b42fcc.ppc64le.rpm
RedHatanyx86_64varnish-devel< 6.0.6-2.module+el8.4.0+21799+2c737c67.5varnish-devel-6.0.6-2.module+el8.4.0+21799+2c737c67.5.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	ppc64le	varnish-modules	< 0.15.0-5.module+el8.3.0+6843+b3b42fcc	varnish-modules-0.15.0-5.module+el8.3.0+6843+b3b42fcc.ppc64le.rpm
RedHat	any	x86_64	varnish-docs	< 6.0.6-2.module+el8.4.0+21799+2c737c67.5	varnish-docs-6.0.6-2.module+el8.4.0+21799+2c737c67.5.x86_64.rpm
RedHat	any	x86_64	varnish-modules-debugsource	< 0.15.0-5.module+el8.3.0+6843+b3b42fcc	varnish-modules-debugsource-0.15.0-5.module+el8.3.0+6843+b3b42fcc.x86_64.rpm
RedHat	any	ppc64le	varnish-modules-debuginfo	< 0.15.0-5.module+el8.3.0+6843+b3b42fcc	varnish-modules-debuginfo-0.15.0-5.module+el8.3.0+6843+b3b42fcc.ppc64le.rpm
RedHat	any	ppc64le	varnish-devel	< 6.0.6-2.module+el8.4.0+21799+2c737c67.5	varnish-devel-6.0.6-2.module+el8.4.0+21799+2c737c67.5.ppc64le.rpm
RedHat	any	ppc64le	varnish-docs	< 6.0.6-2.module+el8.4.0+21799+2c737c67.5	varnish-docs-6.0.6-2.module+el8.4.0+21799+2c737c67.5.ppc64le.rpm
RedHat	any	x86_64	varnish-modules	< 0.15.0-5.module+el8.3.0+6843+b3b42fcc	varnish-modules-0.15.0-5.module+el8.3.0+6843+b3b42fcc.x86_64.rpm
RedHat	any	x86_64	varnish	< 6.0.6-2.module+el8.4.0+21799+2c737c67.5	varnish-6.0.6-2.module+el8.4.0+21799+2c737c67.5.x86_64.rpm
RedHat	any	ppc64le	varnish-modules-debugsource	< 0.15.0-5.module+el8.3.0+6843+b3b42fcc	varnish-modules-debugsource-0.15.0-5.module+el8.3.0+6843+b3b42fcc.ppc64le.rpm
RedHat	any	x86_64	varnish-devel	< 6.0.6-2.module+el8.4.0+21799+2c737c67.5	varnish-devel-6.0.6-2.module+el8.4.0+21799+2c737c67.5.x86_64.rpm