Varnish-cache

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Varnish-cache records in CISA KEV

No Varnish-cache vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Varnish 3 records MEDIUM Varnish Cache 3 records LOW Varnish-modules 1 record LOW Varnish-modules Klarlack 1 record LOW

Records

3 records in Varnish · all components

TI-2017-06317 CVE-2017-8807 · GHSA-r6hf-gj32-7rc9

Memory corruption in Varnish HTTP Cache 4.1.x before 4.1.9 and 5.x before 5.2.1

MEDIUM 46

vbf_stp_error in bin/varnishd/cache/cache_fetch.c in Varnish HTTP Cache 4.1.x before 4.1.9 and 5.x before 5.2.1 allows remote attackers to obtain sensitive information from process memory because a VFP_GetStorage buffer…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.04084 Published 2017-11-16 No fix listed CWE-119

TI-2017-09166 CVE-2017-12425 · GHSA-jhqh-84v8-3cw2

An issue was discovered in Varnish HTTP Cache 4.0.1 through 4.0.4, 4.1.0 through 4.1.7…

LOW 37

An issue was discovered in Varnish HTTP Cache 4.0.1 through 4.0.4, 4.1.0 through 4.1.7, 5.0.0, and 5.1.0 through 5.1.2.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02416 Published 2017-08-04 Will not fix CWE-190

TI-2013-03933 CVE-2013-4484 · GHSA-p7mm-48cj-8hqw

Varnish before 3.0.5 allows remote attackers to cause a denial of service (child-process…

LOW 29

Varnish before 3.0.5 allows remote attackers to cause a denial of service (child-process crash and temporary caching outage) via a GET request with trailing whitespace characters and no URI.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03236 Published 2013-11-01 No fix listed CWE-119

Open these records in search →

Critical	1
High	4
Medium	2
Low	0
No CVSS	0