Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/varnish@6.1.1-1%2Bdeb10u3
purl pkg:deb/debian/varnish@6.1.1-1%2Bdeb10u3
Next non-vulnerable version 7.7.3-2
Latest non-vulnerable version 7.7.3-2
Risk 4.1
Vulnerabilities affecting this package (8)
Vulnerability Summary Fixed by
VCID-hery-ps62-9kf5
Aliases:
CVE-2019-15892
varnish: denial of service handling certain crafted HTTP/1 requests
6.5.1-1+deb11u3
Affected by 5 other vulnerabilities.
VCID-hpb7-1n1t-n3em
Aliases:
CVE-2022-45060
VSV00011
varnish: Request Forgery Vulnerability
6.5.1-1+deb11u3
Affected by 5 other vulnerabilities.
VCID-j1qj-kj7k-v7fx
Aliases:
CVE-2025-47905
VSV00016
varnish: request smuggling attacks
7.1.1-2+deb12u1
Affected by 3 other vulnerabilities.
VCID-mbcb-cn8g-zfgw
Aliases:
CVE-2022-23959
varnish: HTTP/1 request smuggling vulnerability
6.5.1-1+deb11u3
Affected by 5 other vulnerabilities.
VCID-pww8-5fsd-1kcz
Aliases:
CVE-2025-30346
VSV00015
varnish: Client-Side Desynchronization in Varnish Cache
7.1.1-2+deb12u1
Affected by 3 other vulnerabilities.
VCID-r7t1-a958-d7dg
Aliases:
CVE-2021-36740
varnish: HTTP/2 request smuggling attack via a large Content-Length header for a POST request
6.5.1-1+deb11u3
Affected by 5 other vulnerabilities.
VCID-rn5t-3pup-kbbv
Aliases:
CVE-2019-20637
varnish: not clearing pointer between two client requests leads to information disclosure
6.5.1-1+deb11u3
Affected by 5 other vulnerabilities.
VCID-wm39-aehq-cyfb
Aliases:
CVE-2020-11653
varnish: remote clients may cause Varnish to assert and restart which could result in DoS
6.5.1-1+deb11u3
Affected by 5 other vulnerabilities.
Vulnerabilities fixed by this package (5)
Vulnerability Summary Aliases
VCID-4fbk-5fwk-efbd security update CVE-2017-8807
VCID-hery-ps62-9kf5 varnish: denial of service handling certain crafted HTTP/1 requests CVE-2019-15892
VCID-mbcb-cn8g-zfgw varnish: HTTP/1 request smuggling vulnerability CVE-2022-23959
VCID-r7t1-a958-d7dg varnish: HTTP/2 request smuggling attack via a large Content-Length header for a POST request CVE-2021-36740
VCID-tnwn-h2wc-q7c4 security update CVE-2017-12425

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T00:12:45.183641+00:00 Debian Oval Importer Fixing VCID-tnwn-h2wc-q7c4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T23:33:46.990330+00:00 Debian Oval Importer Affected by VCID-j1qj-kj7k-v7fx https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T23:32:25.792302+00:00 Debian Oval Importer Affected by VCID-hery-ps62-9kf5 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T22:26:41.683791+00:00 Debian Oval Importer Affected by VCID-rn5t-3pup-kbbv https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T20:46:23.256858+00:00 Debian Oval Importer Affected by VCID-r7t1-a958-d7dg https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T20:40:13.826144+00:00 Debian Oval Importer Affected by VCID-mbcb-cn8g-zfgw https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T20:33:43.004960+00:00 Debian Oval Importer Affected by VCID-hpb7-1n1t-n3em https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:16:28.845325+00:00 Debian Oval Importer Affected by VCID-pww8-5fsd-1kcz https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:01:44.179194+00:00 Debian Oval Importer Fixing VCID-4fbk-5fwk-efbd https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T16:25:26.634145+00:00 Debian Oval Importer Affected by VCID-wm39-aehq-cyfb https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T15:04:45.496027+00:00 Debian Oval Importer Fixing VCID-mbcb-cn8g-zfgw https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.4.0
2026-04-15T14:51:47.103635+00:00 Debian Oval Importer Fixing VCID-r7t1-a958-d7dg https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.4.0
2026-04-15T14:41:15.940919+00:00 Debian Oval Importer Fixing VCID-hery-ps62-9kf5 https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.4.0
2026-04-11T23:46:35.689411+00:00 Debian Oval Importer Fixing VCID-tnwn-h2wc-q7c4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T23:08:50.829632+00:00 Debian Oval Importer Affected by VCID-j1qj-kj7k-v7fx https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T23:07:37.163279+00:00 Debian Oval Importer Affected by VCID-hery-ps62-9kf5 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T22:03:50.786292+00:00 Debian Oval Importer Affected by VCID-rn5t-3pup-kbbv https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T20:27:18.310438+00:00 Debian Oval Importer Affected by VCID-r7t1-a958-d7dg https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T20:21:19.053842+00:00 Debian Oval Importer Affected by VCID-mbcb-cn8g-zfgw https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T20:14:59.929589+00:00 Debian Oval Importer Affected by VCID-hpb7-1n1t-n3em https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:59:55.016147+00:00 Debian Oval Importer Affected by VCID-pww8-5fsd-1kcz https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:45:47.649570+00:00 Debian Oval Importer Fixing VCID-4fbk-5fwk-efbd https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T16:12:40.723014+00:00 Debian Oval Importer Affected by VCID-wm39-aehq-cyfb https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T14:53:03.017652+00:00 Debian Oval Importer Fixing VCID-mbcb-cn8g-zfgw https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.3.0
2026-04-11T14:40:01.679786+00:00 Debian Oval Importer Fixing VCID-r7t1-a958-d7dg https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.3.0
2026-04-11T14:29:34.307452+00:00 Debian Oval Importer Fixing VCID-hery-ps62-9kf5 https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.3.0
2026-04-08T23:18:50.323357+00:00 Debian Oval Importer Fixing VCID-tnwn-h2wc-q7c4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T22:42:32.425492+00:00 Debian Oval Importer Affected by VCID-j1qj-kj7k-v7fx https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T22:41:17.320172+00:00 Debian Oval Importer Affected by VCID-hery-ps62-9kf5 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T21:40:49.423908+00:00 Debian Oval Importer Affected by VCID-rn5t-3pup-kbbv https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:07:44.849001+00:00 Debian Oval Importer Affected by VCID-r7t1-a958-d7dg https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:02:02.084966+00:00 Debian Oval Importer Affected by VCID-mbcb-cn8g-zfgw https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T19:56:03.602395+00:00 Debian Oval Importer Affected by VCID-hpb7-1n1t-n3em https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:44:26.459412+00:00 Debian Oval Importer Affected by VCID-pww8-5fsd-1kcz https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:30:49.376316+00:00 Debian Oval Importer Fixing VCID-4fbk-5fwk-efbd https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T16:05:04.966343+00:00 Debian Oval Importer Affected by VCID-wm39-aehq-cyfb https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-07T23:25:33.385195+00:00 Debian Oval Importer Fixing VCID-mbcb-cn8g-zfgw https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.1.0
2026-04-07T23:13:03.309486+00:00 Debian Oval Importer Fixing VCID-r7t1-a958-d7dg https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.1.0
2026-04-07T23:02:56.507072+00:00 Debian Oval Importer Fixing VCID-hery-ps62-9kf5 https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 38.1.0