Read the docs

varnish-software

Records18All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

varnish-software records in CISA KEV

No varnish-software vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Varnish Cache 7 records MEDIUM Varnish Enterprise 6 records MEDIUM Varnish Cache Plus 2 records MEDIUM Varnich Cache 1 record MEDIUM Vmod Digest 1 record LOW

Records

1 record in Vmod Digest · all components

TI-2023-21726 CVE-2023-41104 · GHSA-rrpc-jfj4-37w9

libvmod-digest before 1.0.3, as used in Varnish Enterprise 6.0.x before 6.0.11r5, has an…

Priority LOW 36

libvmod-digest before 1.0.3, as used in Varnish Enterprise 6.0.x before 6.0.11r5, has an out-of-bounds memory access during base64 decoding, leading to both authentication bypass and information disclosure; however, the…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00595 Published 2023-08-23 No fix listed CWE-119
Open these records in search →