Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c3wj-m54r-wfgq

Опубликовано: 24 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, allows credits exhaustion for an HTTP/2 connection control flow window, aka a Broke Window Attack.

Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, allows credits exhaustion for an HTTP/2 connection control flow window, aka a Broke Window Attack.

EPSS

Процентиль: 22%
0.00071
Низкий

7.5 High

CVSS3

Дефекты

CWE-770

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 1 года назад

Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, allows credits exhaustion for an HTTP/2 connection control flow window, aka a Broke Window Attack.

CVSS3: 7.5
redhat
около 1 года назад

Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, allows credits exhaustion for an HTTP/2 connection control flow window, aka a Broke Window Attack.

CVSS3: 7.5
nvd
около 1 года назад

Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, allows credits exhaustion for an HTTP/2 connection control flow window, aka a Broke Window Attack.

CVSS3: 7.5
debian
около 1 года назад

Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 L ...

rocky
около 1 года назад

Important: varnish security update

EPSS

Процентиль: 22%
0.00071
Низкий

7.5 High

CVSS3

Дефекты

CWE-770