Vulnerabilities

TI-2017-06317 CVE-2017-8807 · GHSA-r6hf-gj32-7rc9

Memory corruption in Varnish HTTP Cache 4.1.x before 4.1.9 and 5.x before 5.2.1

MEDIUM 46

vbf_stp_error in bin/varnishd/cache/cache_fetch.c in Varnish HTTP Cache 4.1.x before 4.1.9 and 5.x before 5.2.1 allows remote attackers to obtain sensitive information from process memory because a VFP_GetStorage buffer…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.04084 Published 2017-11-16 No fix listed CWE-119

TI-2017-09166 CVE-2017-12425 · GHSA-jhqh-84v8-3cw2

An issue was discovered in Varnish HTTP Cache 4.0.1 through 4.0.4, 4.1.0 through 4.1.7…

LOW 37

An issue was discovered in Varnish HTTP Cache 4.0.1 through 4.0.4, 4.1.0 through 4.1.7, 5.0.0, and 5.1.0 through 5.1.2.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02416 Published 2017-08-04 Will not fix CWE-190

TI-2013-03933 CVE-2013-4484 · GHSA-p7mm-48cj-8hqw

Varnish before 3.0.5 allows remote attackers to cause a denial of service (child-process…

LOW 29

Varnish before 3.0.5 allows remote attackers to cause a denial of service (child-process crash and temporary caching outage) via a GET request with trailing whitespace characters and no URI.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03236 Published 2013-11-01 No fix listed CWE-119

Vulnerabilities

Filters

Memory corruption in Varnish HTTP Cache 4.1.x before 4.1.9 and 5.x before 5.2.1

An issue was discovered in Varnish HTTP Cache 4.0.1 through 4.0.4, 4.1.0 through 4.1.7…

Varnish before 3.0.5 allows remote attackers to cause a denial of service (child-process…