Search for packages
| purl | pkg:deb/debian/varnish@6.5.1-1%2Bdeb11u3 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-5781-s1ny-q7ey
Aliases: CVE-2023-44487 GHSA-2m7v-gc89-fjqf GHSA-qppj-fm5r-hxr3 GHSA-vx74-f528-fxqg GHSA-xpw8-rcwv-8f8p GMS-2023-3377 VSV00013 |
Affected by 1 other vulnerability. |
|
|
VCID-cmeu-b3fh-hkaf
Aliases: CVE-2025-8671 VSV00017 |
upstream: |
Affected by 0 other vulnerabilities. |
|
VCID-djsh-vmzh-sbe7
Aliases: CVE-2024-30156 VSV00014 |
varnish: HTTP/2 Broken Window Attack may result in denial of service |
Affected by 1 other vulnerability. |
|
VCID-j1qj-kj7k-v7fx
Aliases: CVE-2025-47905 VSV00016 |
varnish: request smuggling attacks |
Affected by 3 other vulnerabilities. |
|
VCID-pww8-5fsd-1kcz
Aliases: CVE-2025-30346 VSV00015 |
varnish: Client-Side Desynchronization in Varnish Cache |
Affected by 3 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-hery-ps62-9kf5 | varnish: denial of service handling certain crafted HTTP/1 requests |
CVE-2019-15892
|
| VCID-hpb7-1n1t-n3em | varnish: Request Forgery Vulnerability |
CVE-2022-45060
VSV00011 |
| VCID-mbcb-cn8g-zfgw | varnish: HTTP/1 request smuggling vulnerability |
CVE-2022-23959
|
| VCID-r7t1-a958-d7dg | varnish: HTTP/2 request smuggling attack via a large Content-Length header for a POST request |
CVE-2021-36740
|
| VCID-rn5t-3pup-kbbv | varnish: not clearing pointer between two client requests leads to information disclosure |
CVE-2019-20637
|
| VCID-wm39-aehq-cyfb | varnish: remote clients may cause Varnish to assert and restart which could result in DoS |
CVE-2020-11653
|