CVE-2025-30347

Description

References

• docs.varnish-software.com/security/VEV00001 · Mitigation

Weitere Schwachstellen in varnish enterprise

• CVE-2026-40395HOCH 7.5Varnish Enterprise before 6.0.16r12 allows a "workspace overflow" denial of service (daemon panic) for shared VCL. The headerplus.write_req0…
• CVE-2026-40394HOCH 7.5Varnish Cache 9 before 9.0.1 and Varnish Enterprise before 6.0.16r11 allows a "workspace overflow" denial of service (daemon panic) for cert…
• CVE-2026-34475KRITISCH 9.8Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url scenarios, mishandle URLs with a path of / …
• CVE-2025-30346MITTEL 4.8Varnish Cache before 7.6.2 and Varnish Enterprise before 6.0.13r10 allow client-side desync via HTTP/1 requests.
• CVE-2023-41104MITTEL 6.5libvmod-digest before 1.0.3, as used in Varnish Enterprise 6.0.x before 6.0.11r5, has an out-of-bounds memory access during base64 decoding,…