Lucene search
Redhat.comRH:CVE-2017-8807HistoryNov 15, 2017 - 3:24 p.m.
CVE-2017-8807
2017-11-1515:24:54
redhat.com
access.redhat.com
9
0.017 Low
EPSS
Percentile
87.8%
vbf_stp_error in bin/varnishd/cache/cache_fetch.c in Varnish HTTP Cache 4.1.x before 4.1.9 and 5.x before 5.2.1 allows remote attackers to obtain sensitive information from process memory because a VFP_GetStorage buffer is larger than intended in certain circumstances involving -sfile Stevedore transient objects.
Related
mageia
mageia
Updated varnish packages fix security vulnerability
2017-12-02 02:13:21
veracode
veracode
Information Disclosure
2020-05-10 23:28:05
prion
prion
Design/Logic Flaw
2017-11-16 02:29:00
openvas
openvas
Debian: Security Advisory (DSA-4034-1)
2017-11-14 00:00:00
Mageia: Security Advisory (MGASA-2017-0435)
2022-01-28 00:00:00
Fedora Update for varnish FEDORA-2017-8575fbfe90
2017-11-28 00:00:00
nessus
nessus
Fedora 27 : varnish (2017-72b50be8d4)
2018-01-15 00:00:00
Fedora 25 : varnish (2017-8575fbfe90)
2017-11-28 00:00:00
Debian DSA-4034-1 : varnish - security update
2017-11-16 00:00:00
debian
debian
[SECURITY] [DSA 4034-1] varnish security update
2017-11-15 12:51:26
[SECURITY] [DSA 4034-1] varnish security update
2017-11-15 12:51:26
osv
osv
CVE-2017-8807
2017-11-16 02:29:05
varnish - security update
2017-11-15 00:00:00
varnish vulnerability
2021-03-15 22:04:55
ubuntucve
ubuntucve
CVE-2017-8807
2017-11-16 00:00:00
cvelist
cvelist
CVE-2017-8807
2017-11-16 02:00:00
freebsd
freebsd
varnish -- information disclosure vulnerability
2017-11-15 00:00:00
debiancve
debiancve
CVE-2017-8807
2017-11-16 02:29:05
cve
cve
CVE-2017-8807
2017-11-16 02:29:05
fedora
fedora
[SECURITY] Fedora 26 Update: varnish-5.1.3-4.fc26
2017-11-28 00:50:34
[SECURITY] Fedora 25 Update: varnish-5.0.0-5.fc25
2017-11-28 04:12:08
[SECURITY] Fedora 27 Update: varnish-5.1.3-4.fc27
2017-11-27 21:25:46
alpinelinux
alpinelinux
CVE-2017-8807
2017-11-16 02:29:05
nvd
nvd
CVE-2017-8807
2017-11-16 02:29:05
ubuntu
ubuntu
Varnish vulnerability
2021-03-15 00:00:00
archlinux
archlinux
[ASA-201711-29] varnish: information disclosure
2017-11-26 00:00:00