Debian/varnish: high 7.5
Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, allows credits exhaustion for an HTTP/2 connection control flow window, aka a Broke
Action: Upgrade varnish to 7.5.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.5.0-1 | - |
Fixed versions
| 7.5.0-1 |
Sources
- osv: DEBIAN-CVE-2024-30156#Debian:13/varnish
- https://security-tracker.debian.org/tracker/CVE-2024-30156
published · modified · JSON