Known vulnerabilities in varnish

Vendor: openEuler
Software: varnish
Software CPE: cpe:2.3:o:openeuler:varnish:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 11
Public exploits: 2
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting varnish varnish is affected by 11 known vulnerabilities: 1 high, 9 medium, 1 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114025 - Resource exhaustion
CVE-2025-8671		 CWE-400 Medium
Available
No
 7.4.3-4 13.08.2025 SB2025081377
SB2025090592
SB2025090593
and 13 more
#VU109043 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-47905		 CWE-444 Medium
No
No
 7.4.3-3 13.05.2025 SB2025051363
SB20250521114
SB2025052335
and 11 more
#VU105850 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-30346		 CWE-444 Medium
No
No
 7.4.3-2 18.03.2025 SB2025031859
SB2025032567
SB2025032630
and 1 more
#VU88221 - Resource exhaustion
CVE-2024-30156		 CWE-400 Medium
No
No
 7.4.3-1 09.04.2024 SB2024040916
SB2024040925
SB2024040926
and 10 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 7.4.2-1 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 655 more
#VU69128 - Server-Side Request Forgery (SSRF)
CVE-2022-45060		 CWE-918 Medium
No
No
 7.0.1-7 08.11.2022 SB2022110886
SB2022112827
SB2022112828
and 17 more
#VU69126 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-45059		 CWE-444 Medium
No
No
 7.0.1-8, 7.0.1-9 08.11.2022 SB2022110886
SB2024031255
SB2024031256
and 4 more
#VU66219 - Reachable Assertion
CVE-2022-38150		 CWE-617 Medium
No
No
 7.0.1-6 09.08.2022 SB2022080920
SB2022082551
SB2022081237
and 2 more
#VU60291 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-23959		 CWE-444 Medium
No
No
 6.6.2-1 03.02.2022 SB2022020331
SB2022020415
SB2022020416
and 14 more
#VU55501 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-36740		 CWE-444 Medium
No
No
 6.0.0-9 02.08.2021 SB2021080215
SB2021080216
SB2021080322
and 10 more
#VU20863 - Reachable Assertion
CVE-2019-15892		 CWE-617 Low
No
No
 6.0.0-5 04.09.2019 SB2019090422
SB2019090603
SB2019092507
and 9 more