Known vulnerabilities in varnish-devel

Known vulnerabilities in varnish-devel

Vendor: openEuler

Software: varnish-devel

Software CPE: cpe:2.3:o:openeuler:varnish-devel:*:*:*:*:*:openeuler:*:*

Website: https://www.openeuler.org/

Total vulnerabilities: 11

Public exploits: 2

Known exploited (KEV): 1

Breakdown by Severity Chart

Vulnerabilities (11)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU114025 - Resource exhaustion CVE-2025-8671	CWE-400	Medium	Available	No	7.4.3-4	13.08.2025	SB2025081377 SB2025090592 SB2025090593 and 13 more
#VU109043 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2025-47905	CWE-444	Medium	No	No	7.4.3-3	13.05.2025	SB2025051363 SB20250521114 SB2025052335 and 11 more
#VU105850 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2025-30346	CWE-444	Medium	No	No	7.4.3-2	18.03.2025	SB2025031859 SB2025032567 SB2025032630 and 1 more
#VU88221 - Resource exhaustion CVE-2024-30156	CWE-400	Medium	No	No	7.4.3-1	09.04.2024	SB2024040916 SB2024040925 SB2024040926 and 10 more
#VU81728 - Resource exhaustion CVE-2023-44487	CWE-400	High	Available	Exploited	7.4.2-1	10.10.2023	SB2023101023 SB2023101024 SB2023101037 and 655 more
#VU69128 - Server-Side Request Forgery (SSRF) CVE-2022-45060	CWE-918	Medium	No	No	7.0.1-7	08.11.2022	SB2022110886 SB2022112827 SB2022112828 and 17 more
#VU69126 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-45059	CWE-444	Medium	No	No	7.0.1-8, 7.0.1-9	08.11.2022	SB2022110886 SB2024031255 SB2024031256 and 4 more
#VU66219 - Reachable Assertion CVE-2022-38150	CWE-617	Medium	No	No	7.0.1-6	09.08.2022	SB2022080920 SB2022082551 SB2022081237 and 2 more
#VU60291 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-23959	CWE-444	Medium	No	No	6.6.2-1	03.02.2022	SB2022020331 SB2022020415 SB2022020416 and 14 more
#VU55501 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2021-36740	CWE-444	Medium	No	No	6.0.0-9	02.08.2021	SB2021080215 SB2021080216 SB2021080322 and 10 more
#VU20863 - Reachable Assertion CVE-2019-15892	CWE-617	Low	No	No	6.0.0-5	04.09.2019	SB2019090422 SB2019090603 SB2019092507 and 9 more