Lucene search

K
rockyRockylinux Product ErrataRLSA-2024:1690
HistoryMay 06, 2024 - 1:04 p.m.

varnish security update

2024-05-0613:04:21
Rockylinux Product Errata
errata.rockylinux.org
1
varnish
security update
rocky linux 8
http/2 broken window attack
cvss
denial of service
cve
vulnerability
web accelerator
web servers
memory

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.6%

An update is available for module.varnish, varnish-modules, varnish, module.varnish-modules.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list
Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don’t have to create the same web page over and over again, giving the website a significant speed up.

Security Fix(es):

  • varnish: HTTP/2 Broken Window Attack may result in denial of service (CVE-2024-30156)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.6%