VUMETRIC
CYBER PORTAL
Dashboard
Security News
Latest Vulnerabilities
Browse Vulnerabilities
by Vendors
by Products
by Categories
Weekly Reports
Vulnerabilities
>
Varnish Cache Project
>
Varnish Cache
> 3.0.0
Exclude new CVEs:
DATE
CVE
VULNERABILITY TITLE
RISK
2023-10-10
CVE-2023-44487
Resource Exhaustion vulnerability in multiple products
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
network
low complexity
ietf
nghttp2
netty
envoyproxy
eclipse
caddyserver
golang
f5
apache
apple
grpc
microsoft
nodejs
dena
facebook
amazon
debian
kazu-yamamoto
istio
varnish-cache-project
traefik
projectcontour
linkerd
linecorp
redhat
fedoraproject
netapp
akka
konghq
jenkins
openresty
cisco
CWE-400
7.5
7.5
2020-02-12
CVE-2013-4090
Unspecified vulnerability in Varnish Cache Project Varnish Cache
Varnish HTTP cache before 3.0.4: ACL bug
network
low complexity
varnish-cache-project
5.0
5.0
2016-04-25
CVE-2015-8852
Varnish 3.x before 3.0.7, when used in certain stacked installations, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a header line terminated by a \r (carriage return) character in conjunction with multiple Content-Length headers in an HTTP request.
network
low complexity
varnish-cache-project
debian
5.0
5.0
2013-11-01
CVE-2013-4484
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
Varnish before 3.0.5 allows remote attackers to cause a denial of service (child-process crash and temporary caching outage) via a GET request with trailing whitespace characters and no URI.
network
low complexity
varnish-cache
varnish-cache-project
CWE-119
5.0
5.0