{"url":"http://public2.vulnerablecode.io/api/packages/106600?format=json","purl":"pkg:deb/debian/varnish@0?distro=trixie","type":"deb","namespace":"debian","name":"varnish","version":"0","qualifiers":{"distro":"trixie"},"subpath":"","is_vulnerable":false,"next_non_vulnerable_version":"2.1.0-2","latest_non_vulnerable_version":"7.7.3-3","affected_by_vulnerabilities":[],"fixing_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/84352?format=json","vulnerability_id":"VCID-15ba-6p26-kucd","summary":"Varnish Cache 9 before 9.0.1 and Varnish Enterprise before 6.0.16r11 allows a \"workspace overflow\" denial of service (daemon panic) for certain amounts of prefetched data. The setup of an HTTP/2 session starts with a speculative HTTP/1 transport, and upon upgrading to h2 the HTTP/1 request is repurposed as stream zero. During the upgrade, a buffer allocation is made to reserve space to send frames to the client. This allocation would split the original workspace, and depending on the amount of prefetched data, the next fetch could perform a pipelining operation that would run out of workspace.","references":[{"reference_url":"https://docs.varnish-software.com/security/VEV00002/","reference_id":"VEV00002","reference_type":"","scores":[{"value":"4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T15:45:49Z/"}],"url":"https://docs.varnish-software.com/security/VEV00002/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/106600?format=json","purl":"pkg:deb/debian/varnish@0?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@0%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/106597?format=json","purl":"pkg:deb/debian/varnish@6.5.1-1%2Bdeb11u3?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1weg-s38v-nkh9"},{"vulnerability":"VCID-3dne-w168-ckcb"},{"vulnerability":"VCID-9h7s-uh6r-ckam"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@6.5.1-1%252Bdeb11u3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/106595?format=json","purl":"pkg:deb/debian/varnish@7.1.1-2%2Bdeb12u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1weg-s38v-nkh9"},{"vulnerability":"VCID-3dne-w168-ckcb"},{"vulnerability":"VCID-9h7s-uh6r-ckam"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@7.1.1-2%252Bdeb12u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/106599?format=json","purl":"pkg:deb/debian/varnish@7.7.0-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@7.7.0-3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/106598?format=json","purl":"pkg:deb/debian/varnish@7.7.3-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@7.7.3-3%3Fdistro=trixie"}],"aliases":["CVE-2026-40394"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-15ba-6p26-kucd"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/164728?format=json","vulnerability_id":"VCID-1dk5-q911-a7cd","summary":"In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to assert and automatically restart through forged HTTP/1 backend responses. An attack uses a crafted reason phrase of the backend response status line. This is fixed in 7.0.3 and 7.1.1.","references":[{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M4KVVCIQVINQQ2D7ORNARSYALMJUMP3I/","reference_id":"M4KVVCIQVINQQ2D7ORNARSYALMJUMP3I","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-20T18:02:09Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M4KVVCIQVINQQ2D7ORNARSYALMJUMP3I/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TW3X4PEKC5C736SCKE2UG3Y7JWKMD2K6/","reference_id":"TW3X4PEKC5C736SCKE2UG3Y7JWKMD2K6","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-20T18:02:09Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TW3X4PEKC5C736SCKE2UG3Y7JWKMD2K6/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2BUKFICLZBXESLQ3MXMIG3G52RZURFK/","reference_id":"V2BUKFICLZBXESLQ3MXMIG3G52RZURFK","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-20T18:02:09Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2BUKFICLZBXESLQ3MXMIG3G52RZURFK/"},{"reference_url":"https://varnish-cache.org/security/VSV00009.html","reference_id":"VSV00009.html","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-20T18:02:09Z/"}],"url":"https://varnish-cache.org/security/VSV00009.html"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/106600?format=json","purl":"pkg:deb/debian/varnish@0?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@0%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/106597?format=json","purl":"pkg:deb/debian/varnish@6.5.1-1%2Bdeb11u3?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1weg-s38v-nkh9"},{"vulnerability":"VCID-3dne-w168-ckcb"},{"vulnerability":"VCID-9h7s-uh6r-ckam"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@6.5.1-1%252Bdeb11u3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/106611?format=json","purl":"pkg:deb/debian/varnish@7.1.1-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@7.1.1-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/106595?format=json","purl":"pkg:deb/debian/varnish@7.1.1-2%2Bdeb12u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1weg-s38v-nkh9"},{"vulnerability":"VCID-3dne-w168-ckcb"},{"vulnerability":"VCID-9h7s-uh6r-ckam"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@7.1.1-2%252Bdeb12u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/106599?format=json","purl":"pkg:deb/debian/varnish@7.7.0-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@7.7.0-3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/106598?format=json","purl":"pkg:deb/debian/varnish@7.7.3-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@7.7.3-3%3Fdistro=trixie"}],"aliases":["CVE-2022-38150"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-1dk5-q911-a7cd"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/84354?format=json","vulnerability_id":"VCID-7kgj-s74u-afgd","summary":"Varnish Enterprise before 6.0.16r12 allows a \"workspace overflow\" denial of service (daemon panic) for shared VCL. The headerplus.write_req0() function from vmod_headerplus updates the underlying req0, which is normally the original read-only request from which req is derived (readable and writable from VCL). This is useful in the active VCL, after amending req, to prepare a refined req0 before switching to a different VCL with the return (vcl(<label>)) action. This is for example how the Varnish Controller operates shared VCL deployments. If the amended req contained too many header fields for req0, this would have resulted in a workspace overflow that would in turn trigger a panic and crash the Varnish Enterprise server. This could be used as a Denial of Service attack vector by malicious clients.","references":[{"reference_url":"https://docs.varnish-software.com/security/VEV00003/","reference_id":"VEV00003","reference_type":"","scores":[{"value":"4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T15:45:24Z/"}],"url":"https://docs.varnish-software.com/security/VEV00003/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/106600?format=json","purl":"pkg:deb/debian/varnish@0?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@0%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/106597?format=json","purl":"pkg:deb/debian/varnish@6.5.1-1%2Bdeb11u3?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1weg-s38v-nkh9"},{"vulnerability":"VCID-3dne-w168-ckcb"},{"vulnerability":"VCID-9h7s-uh6r-ckam"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@6.5.1-1%252Bdeb11u3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/106595?format=json","purl":"pkg:deb/debian/varnish@7.1.1-2%2Bdeb12u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1weg-s38v-nkh9"},{"vulnerability":"VCID-3dne-w168-ckcb"},{"vulnerability":"VCID-9h7s-uh6r-ckam"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@7.1.1-2%252Bdeb12u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/106599?format=json","purl":"pkg:deb/debian/varnish@7.7.0-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@7.7.0-3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/106598?format=json","purl":"pkg:deb/debian/varnish@7.7.3-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@7.7.3-3%3Fdistro=trixie"}],"aliases":["CVE-2026-40395"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-7kgj-s74u-afgd"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/176854?format=json","vulnerability_id":"VCID-8kxw-uhne-fbab","summary":"Multiple vulnerabilities have been found in Varnish, the worst of\n    which could allow a remote attacker to create a Denial of Service\n    condition.","references":[{"reference_url":"https://security.gentoo.org/glsa/201412-30","reference_id":"GLSA-201412-30","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201412-30"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/106600?format=json","purl":"pkg:deb/debian/varnish@0?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@0%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/106597?format=json","purl":"pkg:deb/debian/varnish@6.5.1-1%2Bdeb11u3?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1weg-s38v-nkh9"},{"vulnerability":"VCID-3dne-w168-ckcb"},{"vulnerability":"VCID-9h7s-uh6r-ckam"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@6.5.1-1%252Bdeb11u3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/106595?format=json","purl":"pkg:deb/debian/varnish@7.1.1-2%2Bdeb12u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1weg-s38v-nkh9"},{"vulnerability":"VCID-3dne-w168-ckcb"},{"vulnerability":"VCID-9h7s-uh6r-ckam"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@7.1.1-2%252Bdeb12u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/106599?format=json","purl":"pkg:deb/debian/varnish@7.7.0-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@7.7.0-3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/106598?format=json","purl":"pkg:deb/debian/varnish@7.7.3-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@7.7.3-3%3Fdistro=trixie"}],"aliases":["CVE-2013-0345"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-8kxw-uhne-fbab"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/80572?format=json","vulnerability_id":"VCID-c1md-rvd7-n3ey","summary":"In Vinyl Cache before 9.0.1 and Varnish Cache before 9.0.3, a deficiency in HTTP/2 request parsing can be exploited to launch a backend request desync\nattack (request smuggling), which in turn can be used for cache poisoning,\nauthentication bypass, or possibly even information disclosure and manipulation. The attack vector only exists if HTTP/2 support is enabled by setting the\nfeature parameter to contain +http2. HTTP/2 support is disabled by\ndefault.","references":[{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138778","reference_id":"1138778","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138778"},{"reference_url":"https://vinyl-cache.org/security/VSV00019.html","reference_id":"VSV00019.html","reference_type":"","scores":[{"value":"2.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/S:N/AU:N/R:A/V:D/RE:L/U:Green"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-06-03T13:27:03Z/"}],"url":"https://vinyl-cache.org/security/VSV00019.html"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/106600?format=json","purl":"pkg:deb/debian/varnish@0?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@0%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/106597?format=json","purl":"pkg:deb/debian/varnish@6.5.1-1%2Bdeb11u3?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1weg-s38v-nkh9"},{"vulnerability":"VCID-3dne-w168-ckcb"},{"vulnerability":"VCID-9h7s-uh6r-ckam"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@6.5.1-1%252Bdeb11u3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/106595?format=json","purl":"pkg:deb/debian/varnish@7.1.1-2%2Bdeb12u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1weg-s38v-nkh9"},{"vulnerability":"VCID-3dne-w168-ckcb"},{"vulnerability":"VCID-9h7s-uh6r-ckam"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@7.1.1-2%252Bdeb12u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/106599?format=json","purl":"pkg:deb/debian/varnish@7.7.0-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@7.7.0-3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/106619?format=json","purl":"pkg:deb/debian/varnish@7.7.0-3%2Bdeb13u1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@7.7.0-3%252Bdeb13u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/106598?format=json","purl":"pkg:deb/debian/varnish@7.7.3-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@7.7.3-3%3Fdistro=trixie"}],"aliases":["CVE-2026-50052"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-c1md-rvd7-n3ey"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/165944?format=json","vulnerability_id":"VCID-g3zb-7kyg-uydf","summary":"An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smuggling attack can be performed on Varnish Cache servers by requesting that certain headers are made hop-by-hop, preventing the Varnish Cache servers from forwarding critical headers to the backend.","references":[{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1023750","reference_id":"1023750","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1023750"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G6ZMOZVBLZXHEV5VRW4I4SOWLQEK5OF5/","reference_id":"G6ZMOZVBLZXHEV5VRW4I4SOWLQEK5OF5","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-01T14:30:02Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G6ZMOZVBLZXHEV5VRW4I4SOWLQEK5OF5/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M4KVVCIQVINQQ2D7ORNARSYALMJUMP3I/","reference_id":"M4KVVCIQVINQQ2D7ORNARSYALMJUMP3I","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-01T14:30:02Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M4KVVCIQVINQQ2D7ORNARSYALMJUMP3I/"},{"reference_url":"https://varnish-cache.org/security/VSV00010.html","reference_id":"VSV00010.html","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-01T14:30:02Z/"}],"url":"https://varnish-cache.org/security/VSV00010.html"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XGF6LFTHXCSYMYUX5HLMVXQH3WHCSFLU/","reference_id":"XGF6LFTHXCSYMYUX5HLMVXQH3WHCSFLU","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-01T14:30:02Z/"}],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XGF6LFTHXCSYMYUX5HLMVXQH3WHCSFLU/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/106600?format=json","purl":"pkg:deb/debian/varnish@0?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@0%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/106597?format=json","purl":"pkg:deb/debian/varnish@6.5.1-1%2Bdeb11u3?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1weg-s38v-nkh9"},{"vulnerability":"VCID-3dne-w168-ckcb"},{"vulnerability":"VCID-9h7s-uh6r-ckam"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@6.5.1-1%252Bdeb11u3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/106612?format=json","purl":"pkg:deb/debian/varnish@7.1.1-1.1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@7.1.1-1.1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/106595?format=json","purl":"pkg:deb/debian/varnish@7.1.1-2%2Bdeb12u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1weg-s38v-nkh9"},{"vulnerability":"VCID-3dne-w168-ckcb"},{"vulnerability":"VCID-9h7s-uh6r-ckam"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@7.1.1-2%252Bdeb12u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/106599?format=json","purl":"pkg:deb/debian/varnish@7.7.0-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@7.7.0-3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/106598?format=json","purl":"pkg:deb/debian/varnish@7.7.3-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@7.7.3-3%3Fdistro=trixie"}],"aliases":["CVE-2022-45059","VSV00010"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-g3zb-7kyg-uydf"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/83925?format=json","vulnerability_id":"VCID-y6k3-d4rb-r7ag","summary":"Varnish Cache 9 before 9.0.1 allows a \"workspace overflow\" denial of service (daemon panic) after timeout_linger. A malicious client could send an HTTP/1 request, wait long enough until the session releases its worker thread (timeout_linger) and resume traffic before the session is closed (timeout_idle) sending more than one request at once to trigger a pipelining operation between requests. This vulnerability affecting Varnish Cache 9.0.0 emerged from a port of the Varnish Enterprise non-blocking architecture for HTTP/2. New code was needed to adapt to a more recent workspace API that formalizes the pipelining operation. In addition to the workspace change on the Varnish Cache side, other differences created merge conflicts, like partial support for trailers in Varnish Enterprise. The conflict resolution missed one code path configuring pipelining to perform a complete workspace rollback, losing the guarantee that prefetched data would fit inside workspace_client during the transition from one request to the next. This can result in a workspace overflow, triggering a panic and crashing the Varnish server.","references":[{"reference_url":"https://github.com/varnish/varnish/issues/15","reference_id":"15","reference_type":"","scores":[{"value":"4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T15:35:30Z/"}],"url":"https://github.com/varnish/varnish/issues/15"},{"reference_url":"https://github.com/varnish/varnish/releases/tag/varnish-9.0.1","reference_id":"varnish-9.0.1","reference_type":"","scores":[{"value":"4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-13T15:35:30Z/"}],"url":"https://github.com/varnish/varnish/releases/tag/varnish-9.0.1"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/106600?format=json","purl":"pkg:deb/debian/varnish@0?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@0%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/106597?format=json","purl":"pkg:deb/debian/varnish@6.5.1-1%2Bdeb11u3?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1weg-s38v-nkh9"},{"vulnerability":"VCID-3dne-w168-ckcb"},{"vulnerability":"VCID-9h7s-uh6r-ckam"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@6.5.1-1%252Bdeb11u3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/106595?format=json","purl":"pkg:deb/debian/varnish@7.1.1-2%2Bdeb12u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1weg-s38v-nkh9"},{"vulnerability":"VCID-3dne-w168-ckcb"},{"vulnerability":"VCID-9h7s-uh6r-ckam"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@7.1.1-2%252Bdeb12u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/106599?format=json","purl":"pkg:deb/debian/varnish@7.7.0-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@7.7.0-3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/106598?format=json","purl":"pkg:deb/debian/varnish@7.7.3-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@7.7.3-3%3Fdistro=trixie"}],"aliases":["CVE-2026-40396"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-y6k3-d4rb-r7ag"}],"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@0%3Fdistro=trixie"}