Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 24/03/2024 Updated: 25/03/2024

Varnish Cache prior to 7.3.2 and 7.4.x prior to 7.4.3 (and prior to 6.0.13 LTS), and Varnish Enterprise 6 prior to 6.0.12r6, allows credits exhaustion for an HTTP/2 connection control flow window, aka a Broke Window Attack.

Debian Bug report logs - #1068455 varnish: CVE-2024-30156 Package: src:varnish; Maintainer for src:varnish is Varnish Package Maintainers <team+varnish-team@trackerdebianorg>; Reported by: Moritz Mühlenhoff <jmm@inutilorg> Date: Fri, 5 Apr 2024 14:54:02 UTC Severity: important Tags: security, upstream Found in ...

https://varnish-cache.org/security/VSV00014.html https://varnish-cache.org/docs/7.5/whats-new/changes-7.5.html#security https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068455 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2024-30156

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect