Varnish Enterprise Varnish Software Varnish Enterprise

Do you want an email whenever new security vulnerabilities are reported in Varnish Software Varnish Enterprise?

By the Year

In 2024 there have been 0 vulnerabilities in Varnish Software Varnish Enterprise . Last year Varnish Enterprise had 1 security vulnerability published. Right now, Varnish Enterprise is on track to have less security vulnerabilities in 2024 than it did last year.

Year Vulnerabilities Average Score
2024 0 0.00
2023 1 6.50
2022 0 0.00
2021 0 0.00
2020 0 0.00
2019 0 0.00
2018 0 0.00

It may take a day or so for new Varnish Enterprise vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Varnish Software Varnish Enterprise Security Vulnerabilities

libvmod-digest before 1.0.3

CVE-2023-41104 6.5 - Medium - August 23, 2023

libvmod-digest before 1.0.3, as used in Varnish Enterprise 6.0.x before 6.0.11r5, has an out-of-bounds memory access during base64 decoding, leading to both authentication bypass and information disclosure; however, the exact attack surface will depend on the particular VCL (Varnish Configuration Language) configuration in use.

Buffer Overflow

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for Varnish Software Varnish Enterprise or by Varnish Software? Click the Watch button to subscribe.

subscribe