Skip to content
OpenAdvisories

Package · Debian

varnish

23 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.5
    CVE-2025-8671 Public exploit

    CVE-2025-8671

    A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures of some HTTP/2 implementations may result in excessive server resource consumption leading to denial-of-service (DoS). By opening stre…

    varnish-software Fastly SUSE Linux Wind River Linux Debian Ubuntu Alpine crates.io
  • High 7.5
    CVE-2023-44487 Exploited Public exploit EPSS 100%

    HTTP/2 Stream Cancellation Attack

    The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

    nodejs go dotnet7 trafficserver Debian Ubuntu Alpine Maven Go SwiftURL
    KEV Oct 10, 2023
  • High 7.5
    CVE-2022-45059 Public exploit

    An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smuggling attack can be per…

    varnish varnish Debian Alpine
  • Unscored —
    CVE-2009-2936 Public exploit EPSS 64%

    The Command Line Interface (aka Server CLI or administration interface) in the master process in the reverse proxy serv…

    varnish Debian
  • Critical 9.8
    CVE-2009-4488 Public exploit EPSS 13%

    Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers…

    varnish varnish Debian Ubuntu