rhsa-2024_1689
Vulnerability from csaf_redhat
Published
2024-04-08 08:47
Modified
2024-11-15 18:35
Summary
Red Hat Security Advisory: rh-varnish6-varnish security update
Notes
Topic
An update for rh-varnish6-varnish is now available for Red Hat Software Collections.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up.
Security Fix(es):
* HTTP/2 Broken Window Attack may result in denial of service (CVE-2024-30156)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for rh-varnish6-varnish is now available for Red Hat Software Collections.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don\u0027t have to create the same web page over and over again, giving the website a significant speed up.\n\nSecurity Fix(es):\n\n* HTTP/2 Broken Window Attack may result in denial of service (CVE-2024-30156)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:1689",
"url": "https://access.redhat.com/errata/RHSA-2024:1689"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2271486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2271486"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1689.json"
}
],
"title": "Red Hat Security Advisory: rh-varnish6-varnish security update",
"tracking": {
"current_release_date": "2024-11-15T18:35:28+00:00",
"generator": {
"date": "2024-11-15T18:35:28+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2024:1689",
"initial_release_date": "2024-04-08T08:47:32+00:00",
"revision_history": [
{
"date": "2024-04-08T08:47:32+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-04-08T08:47:32+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-15T18:35:28+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Software Collections for RHEL Workstation(v. 7)",
"product": {
"name": "Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for RHEL(v. 7)",
"product": {
"name": "Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Software Collections"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-varnish6-varnish-0:6.0.13-1.el7.src",
"product": {
"name": "rh-varnish6-varnish-0:6.0.13-1.el7.src",
"product_id": "rh-varnish6-varnish-0:6.0.13-1.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-varnish6-varnish@6.0.13-1.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "rh-varnish6-varnish-modules-0:0.15.0-8.el7.src",
"product": {
"name": "rh-varnish6-varnish-modules-0:0.15.0-8.el7.src",
"product_id": "rh-varnish6-varnish-modules-0:0.15.0-8.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-varnish6-varnish-modules@0.15.0-8.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-varnish6-varnish-0:6.0.13-1.el7.x86_64",
"product": {
"name": "rh-varnish6-varnish-0:6.0.13-1.el7.x86_64",
"product_id": "rh-varnish6-varnish-0:6.0.13-1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-varnish6-varnish@6.0.13-1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-varnish6-varnish-devel-0:6.0.13-1.el7.x86_64",
"product": {
"name": "rh-varnish6-varnish-devel-0:6.0.13-1.el7.x86_64",
"product_id": "rh-varnish6-varnish-devel-0:6.0.13-1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-varnish6-varnish-devel@6.0.13-1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-varnish6-varnish-docs-0:6.0.13-1.el7.x86_64",
"product": {
"name": "rh-varnish6-varnish-docs-0:6.0.13-1.el7.x86_64",
"product_id": "rh-varnish6-varnish-docs-0:6.0.13-1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-varnish6-varnish-docs@6.0.13-1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-varnish6-varnish-libs-0:6.0.13-1.el7.x86_64",
"product": {
"name": "rh-varnish6-varnish-libs-0:6.0.13-1.el7.x86_64",
"product_id": "rh-varnish6-varnish-libs-0:6.0.13-1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-varnish6-varnish-libs@6.0.13-1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-varnish6-varnish-modules-0:0.15.0-8.el7.x86_64",
"product": {
"name": "rh-varnish6-varnish-modules-0:0.15.0-8.el7.x86_64",
"product_id": "rh-varnish6-varnish-modules-0:0.15.0-8.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-varnish6-varnish-modules@0.15.0-8.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.x86_64",
"product": {
"name": "rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.x86_64",
"product_id": "rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-varnish6-varnish-modules-debuginfo@0.15.0-8.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-varnish6-varnish-0:6.0.13-1.el7.ppc64le",
"product": {
"name": "rh-varnish6-varnish-0:6.0.13-1.el7.ppc64le",
"product_id": "rh-varnish6-varnish-0:6.0.13-1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-varnish6-varnish@6.0.13-1.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "rh-varnish6-varnish-devel-0:6.0.13-1.el7.ppc64le",
"product": {
"name": "rh-varnish6-varnish-devel-0:6.0.13-1.el7.ppc64le",
"product_id": "rh-varnish6-varnish-devel-0:6.0.13-1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-varnish6-varnish-devel@6.0.13-1.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "rh-varnish6-varnish-docs-0:6.0.13-1.el7.ppc64le",
"product": {
"name": "rh-varnish6-varnish-docs-0:6.0.13-1.el7.ppc64le",
"product_id": "rh-varnish6-varnish-docs-0:6.0.13-1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-varnish6-varnish-docs@6.0.13-1.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "rh-varnish6-varnish-libs-0:6.0.13-1.el7.ppc64le",
"product": {
"name": "rh-varnish6-varnish-libs-0:6.0.13-1.el7.ppc64le",
"product_id": "rh-varnish6-varnish-libs-0:6.0.13-1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-varnish6-varnish-libs@6.0.13-1.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "rh-varnish6-varnish-modules-0:0.15.0-8.el7.ppc64le",
"product": {
"name": "rh-varnish6-varnish-modules-0:0.15.0-8.el7.ppc64le",
"product_id": "rh-varnish6-varnish-modules-0:0.15.0-8.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-varnish6-varnish-modules@0.15.0-8.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.ppc64le",
"product": {
"name": "rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.ppc64le",
"product_id": "rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-varnish6-varnish-modules-debuginfo@0.15.0-8.el7?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "rh-varnish6-varnish-0:6.0.13-1.el7.s390x",
"product": {
"name": "rh-varnish6-varnish-0:6.0.13-1.el7.s390x",
"product_id": "rh-varnish6-varnish-0:6.0.13-1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-varnish6-varnish@6.0.13-1.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "rh-varnish6-varnish-devel-0:6.0.13-1.el7.s390x",
"product": {
"name": "rh-varnish6-varnish-devel-0:6.0.13-1.el7.s390x",
"product_id": "rh-varnish6-varnish-devel-0:6.0.13-1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-varnish6-varnish-devel@6.0.13-1.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "rh-varnish6-varnish-docs-0:6.0.13-1.el7.s390x",
"product": {
"name": "rh-varnish6-varnish-docs-0:6.0.13-1.el7.s390x",
"product_id": "rh-varnish6-varnish-docs-0:6.0.13-1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-varnish6-varnish-docs@6.0.13-1.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "rh-varnish6-varnish-libs-0:6.0.13-1.el7.s390x",
"product": {
"name": "rh-varnish6-varnish-libs-0:6.0.13-1.el7.s390x",
"product_id": "rh-varnish6-varnish-libs-0:6.0.13-1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-varnish6-varnish-libs@6.0.13-1.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "rh-varnish6-varnish-modules-0:0.15.0-8.el7.s390x",
"product": {
"name": "rh-varnish6-varnish-modules-0:0.15.0-8.el7.s390x",
"product_id": "rh-varnish6-varnish-modules-0:0.15.0-8.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-varnish6-varnish-modules@0.15.0-8.el7?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.s390x",
"product": {
"name": "rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.s390x",
"product_id": "rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rh-varnish6-varnish-modules-debuginfo@0.15.0-8.el7?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-0:6.0.13-1.el7.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.ppc64le"
},
"product_reference": "rh-varnish6-varnish-0:6.0.13-1.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-0:6.0.13-1.el7.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.s390x"
},
"product_reference": "rh-varnish6-varnish-0:6.0.13-1.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-0:6.0.13-1.el7.src as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.src"
},
"product_reference": "rh-varnish6-varnish-0:6.0.13-1.el7.src",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-0:6.0.13-1.el7.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.x86_64"
},
"product_reference": "rh-varnish6-varnish-0:6.0.13-1.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-devel-0:6.0.13-1.el7.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-varnish6-varnish-devel-0:6.0.13-1.el7.ppc64le"
},
"product_reference": "rh-varnish6-varnish-devel-0:6.0.13-1.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-devel-0:6.0.13-1.el7.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-varnish6-varnish-devel-0:6.0.13-1.el7.s390x"
},
"product_reference": "rh-varnish6-varnish-devel-0:6.0.13-1.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-devel-0:6.0.13-1.el7.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-varnish6-varnish-devel-0:6.0.13-1.el7.x86_64"
},
"product_reference": "rh-varnish6-varnish-devel-0:6.0.13-1.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-docs-0:6.0.13-1.el7.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-varnish6-varnish-docs-0:6.0.13-1.el7.ppc64le"
},
"product_reference": "rh-varnish6-varnish-docs-0:6.0.13-1.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-docs-0:6.0.13-1.el7.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-varnish6-varnish-docs-0:6.0.13-1.el7.s390x"
},
"product_reference": "rh-varnish6-varnish-docs-0:6.0.13-1.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-docs-0:6.0.13-1.el7.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-varnish6-varnish-docs-0:6.0.13-1.el7.x86_64"
},
"product_reference": "rh-varnish6-varnish-docs-0:6.0.13-1.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-libs-0:6.0.13-1.el7.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-varnish6-varnish-libs-0:6.0.13-1.el7.ppc64le"
},
"product_reference": "rh-varnish6-varnish-libs-0:6.0.13-1.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-libs-0:6.0.13-1.el7.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-varnish6-varnish-libs-0:6.0.13-1.el7.s390x"
},
"product_reference": "rh-varnish6-varnish-libs-0:6.0.13-1.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-libs-0:6.0.13-1.el7.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-varnish6-varnish-libs-0:6.0.13-1.el7.x86_64"
},
"product_reference": "rh-varnish6-varnish-libs-0:6.0.13-1.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-modules-0:0.15.0-8.el7.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.ppc64le"
},
"product_reference": "rh-varnish6-varnish-modules-0:0.15.0-8.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-modules-0:0.15.0-8.el7.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.s390x"
},
"product_reference": "rh-varnish6-varnish-modules-0:0.15.0-8.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-modules-0:0.15.0-8.el7.src as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.src"
},
"product_reference": "rh-varnish6-varnish-modules-0:0.15.0-8.el7.src",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-modules-0:0.15.0-8.el7.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.x86_64"
},
"product_reference": "rh-varnish6-varnish-modules-0:0.15.0-8.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.ppc64le"
},
"product_reference": "rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.ppc64le",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.s390x"
},
"product_reference": "rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.s390x",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
"product_id": "7Server-RHSCL-3.8:rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.x86_64"
},
"product_reference": "rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-0:6.0.13-1.el7.ppc64le as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.ppc64le"
},
"product_reference": "rh-varnish6-varnish-0:6.0.13-1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-0:6.0.13-1.el7.s390x as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.s390x"
},
"product_reference": "rh-varnish6-varnish-0:6.0.13-1.el7.s390x",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-0:6.0.13-1.el7.src as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.src"
},
"product_reference": "rh-varnish6-varnish-0:6.0.13-1.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-0:6.0.13-1.el7.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.x86_64"
},
"product_reference": "rh-varnish6-varnish-0:6.0.13-1.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-devel-0:6.0.13-1.el7.ppc64le as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-varnish6-varnish-devel-0:6.0.13-1.el7.ppc64le"
},
"product_reference": "rh-varnish6-varnish-devel-0:6.0.13-1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-devel-0:6.0.13-1.el7.s390x as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-varnish6-varnish-devel-0:6.0.13-1.el7.s390x"
},
"product_reference": "rh-varnish6-varnish-devel-0:6.0.13-1.el7.s390x",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-devel-0:6.0.13-1.el7.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-varnish6-varnish-devel-0:6.0.13-1.el7.x86_64"
},
"product_reference": "rh-varnish6-varnish-devel-0:6.0.13-1.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-docs-0:6.0.13-1.el7.ppc64le as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-varnish6-varnish-docs-0:6.0.13-1.el7.ppc64le"
},
"product_reference": "rh-varnish6-varnish-docs-0:6.0.13-1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-docs-0:6.0.13-1.el7.s390x as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-varnish6-varnish-docs-0:6.0.13-1.el7.s390x"
},
"product_reference": "rh-varnish6-varnish-docs-0:6.0.13-1.el7.s390x",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-docs-0:6.0.13-1.el7.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-varnish6-varnish-docs-0:6.0.13-1.el7.x86_64"
},
"product_reference": "rh-varnish6-varnish-docs-0:6.0.13-1.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-libs-0:6.0.13-1.el7.ppc64le as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-varnish6-varnish-libs-0:6.0.13-1.el7.ppc64le"
},
"product_reference": "rh-varnish6-varnish-libs-0:6.0.13-1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-libs-0:6.0.13-1.el7.s390x as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-varnish6-varnish-libs-0:6.0.13-1.el7.s390x"
},
"product_reference": "rh-varnish6-varnish-libs-0:6.0.13-1.el7.s390x",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-libs-0:6.0.13-1.el7.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-varnish6-varnish-libs-0:6.0.13-1.el7.x86_64"
},
"product_reference": "rh-varnish6-varnish-libs-0:6.0.13-1.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-modules-0:0.15.0-8.el7.ppc64le as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.ppc64le"
},
"product_reference": "rh-varnish6-varnish-modules-0:0.15.0-8.el7.ppc64le",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-modules-0:0.15.0-8.el7.s390x as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.s390x"
},
"product_reference": "rh-varnish6-varnish-modules-0:0.15.0-8.el7.s390x",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-modules-0:0.15.0-8.el7.src as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.src"
},
"product_reference": "rh-varnish6-varnish-modules-0:0.15.0-8.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-modules-0:0.15.0-8.el7.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.x86_64"
},
"product_reference": "rh-varnish6-varnish-modules-0:0.15.0-8.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.ppc64le as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.ppc64le"
},
"product_reference": "rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.ppc64le",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.s390x as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.s390x"
},
"product_reference": "rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.s390x",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)",
"product_id": "7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.x86_64"
},
"product_reference": "rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-3.8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-30156",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2024-03-25T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2271486"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Varnish cache server, with HTTP/2 support enabled, that may allow a Denial of Service type of attack. A malicious actor can cause the server to run out of credits during the HTTP/2 connection control flow. As a consequence, the server will stop to properly process the active HTTP streams, retaining the already allocated resources, leading to resource starvation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "varnish: HTTP/2 Broken Window Attack may result in denial of service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "CVE-2024-30156 represents a important severity issue due to its potential to cause widespread denial of service (DoS) across Varnish Cacher servers with HTTP/2 protocol enabled. By exploiting this vulnerability, attackers can exhaust the server\u0027s HTTP/2 connection control flow window credits, thereby halting the processing of streams and indefinitely retaining associated resources. This can lead to a complete service outage, impacting the availability and performance of web services relying on Varnish Cache. Given the prevalence of HTTP/2 adoption for its performance benefits, the vulnerability poses a significant risk to web infrastructure, necessitating immediate mitigation measures to prevent exploitation and mitigate the impact on affected systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.ppc64le",
"7Server-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.s390x",
"7Server-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.src",
"7Server-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.x86_64",
"7Server-RHSCL-3.8:rh-varnish6-varnish-devel-0:6.0.13-1.el7.ppc64le",
"7Server-RHSCL-3.8:rh-varnish6-varnish-devel-0:6.0.13-1.el7.s390x",
"7Server-RHSCL-3.8:rh-varnish6-varnish-devel-0:6.0.13-1.el7.x86_64",
"7Server-RHSCL-3.8:rh-varnish6-varnish-docs-0:6.0.13-1.el7.ppc64le",
"7Server-RHSCL-3.8:rh-varnish6-varnish-docs-0:6.0.13-1.el7.s390x",
"7Server-RHSCL-3.8:rh-varnish6-varnish-docs-0:6.0.13-1.el7.x86_64",
"7Server-RHSCL-3.8:rh-varnish6-varnish-libs-0:6.0.13-1.el7.ppc64le",
"7Server-RHSCL-3.8:rh-varnish6-varnish-libs-0:6.0.13-1.el7.s390x",
"7Server-RHSCL-3.8:rh-varnish6-varnish-libs-0:6.0.13-1.el7.x86_64",
"7Server-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.ppc64le",
"7Server-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.s390x",
"7Server-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.src",
"7Server-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.x86_64",
"7Server-RHSCL-3.8:rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.ppc64le",
"7Server-RHSCL-3.8:rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.s390x",
"7Server-RHSCL-3.8:rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.s390x",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.src",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-devel-0:6.0.13-1.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-devel-0:6.0.13-1.el7.s390x",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-devel-0:6.0.13-1.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-docs-0:6.0.13-1.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-docs-0:6.0.13-1.el7.s390x",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-docs-0:6.0.13-1.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-libs-0:6.0.13-1.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-libs-0:6.0.13-1.el7.s390x",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-libs-0:6.0.13-1.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.s390x",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.src",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.s390x",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-30156"
},
{
"category": "external",
"summary": "RHBZ#2271486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2271486"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-30156",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-30156"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-30156",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30156"
},
{
"category": "external",
"summary": "https://varnish-cache.org/security/VSV00014.html",
"url": "https://varnish-cache.org/security/VSV00014.html"
}
],
"release_date": "2024-03-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-08T08:47:32+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.ppc64le",
"7Server-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.s390x",
"7Server-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.src",
"7Server-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.x86_64",
"7Server-RHSCL-3.8:rh-varnish6-varnish-devel-0:6.0.13-1.el7.ppc64le",
"7Server-RHSCL-3.8:rh-varnish6-varnish-devel-0:6.0.13-1.el7.s390x",
"7Server-RHSCL-3.8:rh-varnish6-varnish-devel-0:6.0.13-1.el7.x86_64",
"7Server-RHSCL-3.8:rh-varnish6-varnish-docs-0:6.0.13-1.el7.ppc64le",
"7Server-RHSCL-3.8:rh-varnish6-varnish-docs-0:6.0.13-1.el7.s390x",
"7Server-RHSCL-3.8:rh-varnish6-varnish-docs-0:6.0.13-1.el7.x86_64",
"7Server-RHSCL-3.8:rh-varnish6-varnish-libs-0:6.0.13-1.el7.ppc64le",
"7Server-RHSCL-3.8:rh-varnish6-varnish-libs-0:6.0.13-1.el7.s390x",
"7Server-RHSCL-3.8:rh-varnish6-varnish-libs-0:6.0.13-1.el7.x86_64",
"7Server-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.ppc64le",
"7Server-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.s390x",
"7Server-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.src",
"7Server-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.x86_64",
"7Server-RHSCL-3.8:rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.ppc64le",
"7Server-RHSCL-3.8:rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.s390x",
"7Server-RHSCL-3.8:rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.s390x",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.src",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-devel-0:6.0.13-1.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-devel-0:6.0.13-1.el7.s390x",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-devel-0:6.0.13-1.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-docs-0:6.0.13-1.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-docs-0:6.0.13-1.el7.s390x",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-docs-0:6.0.13-1.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-libs-0:6.0.13-1.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-libs-0:6.0.13-1.el7.s390x",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-libs-0:6.0.13-1.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.s390x",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.src",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.s390x",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:1689"
},
{
"category": "workaround",
"details": "A possible mitigation for this issue is to disable http2 support until the package can be updated.\nThis can be performed by running the following command:\n\n~~~\nvarnishadm param.set feature -http2\n~~~\n\nNote: you must remove `h2` from the list of protocols if your TLS terminator is advertising it with ALPN.\n\nIt\u0027s also possible to use the `MAIN.sc_bankrupt` counter to monitor possible on-going attacks to the varnish server.",
"product_ids": [
"7Server-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.ppc64le",
"7Server-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.s390x",
"7Server-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.src",
"7Server-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.x86_64",
"7Server-RHSCL-3.8:rh-varnish6-varnish-devel-0:6.0.13-1.el7.ppc64le",
"7Server-RHSCL-3.8:rh-varnish6-varnish-devel-0:6.0.13-1.el7.s390x",
"7Server-RHSCL-3.8:rh-varnish6-varnish-devel-0:6.0.13-1.el7.x86_64",
"7Server-RHSCL-3.8:rh-varnish6-varnish-docs-0:6.0.13-1.el7.ppc64le",
"7Server-RHSCL-3.8:rh-varnish6-varnish-docs-0:6.0.13-1.el7.s390x",
"7Server-RHSCL-3.8:rh-varnish6-varnish-docs-0:6.0.13-1.el7.x86_64",
"7Server-RHSCL-3.8:rh-varnish6-varnish-libs-0:6.0.13-1.el7.ppc64le",
"7Server-RHSCL-3.8:rh-varnish6-varnish-libs-0:6.0.13-1.el7.s390x",
"7Server-RHSCL-3.8:rh-varnish6-varnish-libs-0:6.0.13-1.el7.x86_64",
"7Server-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.ppc64le",
"7Server-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.s390x",
"7Server-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.src",
"7Server-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.x86_64",
"7Server-RHSCL-3.8:rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.ppc64le",
"7Server-RHSCL-3.8:rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.s390x",
"7Server-RHSCL-3.8:rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.s390x",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.src",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-devel-0:6.0.13-1.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-devel-0:6.0.13-1.el7.s390x",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-devel-0:6.0.13-1.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-docs-0:6.0.13-1.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-docs-0:6.0.13-1.el7.s390x",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-docs-0:6.0.13-1.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-libs-0:6.0.13-1.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-libs-0:6.0.13-1.el7.s390x",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-libs-0:6.0.13-1.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.s390x",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.src",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.s390x",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"7Server-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.ppc64le",
"7Server-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.s390x",
"7Server-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.src",
"7Server-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.x86_64",
"7Server-RHSCL-3.8:rh-varnish6-varnish-devel-0:6.0.13-1.el7.ppc64le",
"7Server-RHSCL-3.8:rh-varnish6-varnish-devel-0:6.0.13-1.el7.s390x",
"7Server-RHSCL-3.8:rh-varnish6-varnish-devel-0:6.0.13-1.el7.x86_64",
"7Server-RHSCL-3.8:rh-varnish6-varnish-docs-0:6.0.13-1.el7.ppc64le",
"7Server-RHSCL-3.8:rh-varnish6-varnish-docs-0:6.0.13-1.el7.s390x",
"7Server-RHSCL-3.8:rh-varnish6-varnish-docs-0:6.0.13-1.el7.x86_64",
"7Server-RHSCL-3.8:rh-varnish6-varnish-libs-0:6.0.13-1.el7.ppc64le",
"7Server-RHSCL-3.8:rh-varnish6-varnish-libs-0:6.0.13-1.el7.s390x",
"7Server-RHSCL-3.8:rh-varnish6-varnish-libs-0:6.0.13-1.el7.x86_64",
"7Server-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.ppc64le",
"7Server-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.s390x",
"7Server-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.src",
"7Server-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.x86_64",
"7Server-RHSCL-3.8:rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.ppc64le",
"7Server-RHSCL-3.8:rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.s390x",
"7Server-RHSCL-3.8:rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.s390x",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.src",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-0:6.0.13-1.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-devel-0:6.0.13-1.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-devel-0:6.0.13-1.el7.s390x",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-devel-0:6.0.13-1.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-docs-0:6.0.13-1.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-docs-0:6.0.13-1.el7.s390x",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-docs-0:6.0.13-1.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-libs-0:6.0.13-1.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-libs-0:6.0.13-1.el7.s390x",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-libs-0:6.0.13-1.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.s390x",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.src",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-0:0.15.0-8.el7.x86_64",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.ppc64le",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.s390x",
"7Workstation-RHSCL-3.8:rh-varnish6-varnish-modules-debuginfo-0:0.15.0-8.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "varnish: HTTP/2 Broken Window Attack may result in denial of service"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…