Varnish-Cache / Varnish Cache
16 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2025-30346 | varnish: Client-Side Desynchronization in Varnish Cache | MEDIUM | 5.4 | Mar 21, 2025 |
| CVE-2023-44487 KEV | HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) | MEDIUM | 6.9 | Oct 10, 2023 |
| CVE-2022-45060 | varnish: Request Forgery Vulnerability | HIGH | 7.5 | Nov 9, 2022 |
| CVE-2022-45059 | varnish: Request Smuggling Vulnerability | HIGH | 7.5 | Nov 9, 2022 |
| CVE-2022-38150 | varnish: denial of service via colon-starting reason phrase | HIGH | 7.5 | Aug 11, 2022 |
| CVE-2022-23959 | varnish: HTTP/1 request smuggling vulnerability | CRITICAL | 9.1 | Jan 26, 2022 |
| CVE-2021-36740 | varnish: HTTP/2 request smuggling attack via a large Content-Length header for a POST request | HIGH | 8.1 | Jul 14, 2021 |
| CVE-2019-20637 | varnish: not clearing pointer between two client requests leads to information disclosure | HIGH | 7.5 | Apr 8, 2020 |
| CVE-2020-11653 | varnish: remote clients may cause Varnish to assert and restart which could result in DoS | HIGH | 7.5 | Apr 8, 2020 |
| CVE-2013-4090 | Varnish HTTP cache before 3.0.4: ACL bug | HIGH | 7.5 | Feb 12, 2020 |
| CVE-2019-15892 | varnish: denial of service handling certain crafted HTTP/1 requests | HIGH | 7.5 | Sep 3, 2019 |
| CVE-2017-8807 | varnish: Data leak - ‘-sfile’ Stevedore transient objects | CRITICAL | 9.1 | Nov 16, 2017 |
| CVE-2017-12425 | varnish: Missing check for integer overflow when handling chunk sizes in HTTP requests | HIGH | 7.5 | Aug 4, 2017 |
| CVE-2015-8852 | varnish: http smuggling issues | HIGH | 7.5 | Apr 25, 2016 |
| CVE-2013-0345 | varnish 3.0.3 uses world-readable permissions for the /var/log/varnish/ directory and the log files in the directory, which allows local users to obtain sensit… | LOW | 2.1 | May 8, 2014 |
| CVE-2013-4484 | Varnish before 3.0.5 allows remote attackers to cause a denial of service (child-process crash and temporary caching outage) via a GET request with trailing wh… | MEDIUM | 5.0 | Nov 1, 2013 |
Showing 1 to 16 of 16 CVEs