Alpine/varnish: high 7.5
Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, allows credits exhaustion for an HTTP/2 connection control flow window, aka a Broke
Action: Upgrade varnish to 7.5.0-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.5.0-r0 | - |
Fixed versions
| 7.5.0-r0 |
Sources
- osv: ALPINE-CVE-2024-30156#Alpine:v3.20/varnish
- https://security.alpinelinux.org/vuln/CVE-2024-30156
published · modified · JSON