Search for packages
| purl | pkg:deb/debian/varnish@7.1.1-1.1%2Bdeb12u1 |
| Next non-vulnerable version | 7.1.1-2+deb12u1 |
| Latest non-vulnerable version | 7.1.1-2+deb12u1 |
| Risk | 10.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-b85u-4g42-nyaq
Aliases: CVE-2024-30156 VSV00014 |
varnish: HTTP/2 Broken Window Attack may result in denial of service |
Affected by 0 other vulnerabilities. |
|
VCID-c4d1-jsqh-hban
Aliases: CVE-2023-44487 GHSA-qppj-fm5r-hxr3 VSV00013 |
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-c4pk-mc4n-wyh9 | varnish: Client-Side Desynchronization in Varnish Cache |
CVE-2025-30346
VSV00015 |
| VCID-pb7u-beyt-fbet | content spoofing |
CVE-2025-47905
|