Known vulnerabilities in varnish (Debian package)

Vendor: Debian
Software CPE: cpe:2.3:o:debian:varnish_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 5
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting varnish (Debian package) varnish (Debian package) is affected by 5 known vulnerabilities: 4 medium, 1 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114025 - Resource exhaustion
CVE-2025-8671
CWE-400 Medium
Available
No
7.7.0-3+deb13u1 13.08.2025 SB2025081377
SB2025090592
SB2025090593
and 13 more
#VU69128 - Server-Side Request Forgery (SSRF)
CVE-2022-45060
CWE-918 Medium
No
No
6.5.1-1+deb11u3 08.11.2022 SB2022110886
SB2022112827
SB2022112828
and 17 more
#VU60291 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-23959
CWE-444 Medium
No
No
6.1.1-1+deb10u3, 6.5.1-1+deb11u2 03.02.2022 SB2022020331
SB2022020415
SB2022020416
and 14 more
#VU55501 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-36740
CWE-444 Medium
No
No
6.1.1-1+deb10u3, 6.5.1-1+deb11u2 02.08.2021 SB2021080215
SB2021080216
SB2021080322
and 10 more
#VU20863 - Reachable Assertion
CVE-2019-15892
CWE-617 Low
No
No
6.1.1-1+deb10u1 04.09.2019 SB2019090422
SB2019090603
SB2019092507
and 9 more