Every CVE Search/ Get API key

CVE-2024-30156

Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise...

7.5 HighFix available

Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, allows credits exhaustion for an HTTP/2 connection control flow window, aka a Broke Window Attack.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

3.66%Up 3.6 points since Mar 24, 2024
90%50%10%1%

What each source reports

CVE List Score used 7.5

Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, allows credits exhaustion for an HTTP/2 connection control flow window, aka a Broke Window Attack.

Record
CVE-2024-30156
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-770
Updated
2026-11-02
EUVDEUVD-2024-28092 7.5

Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, allows credits exhaustion for an HTTP/2 connection control flow window, aka a Broke Window Attack.

Record
EUVD-2024-28092
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-c3wj-m54r-wfgq 7.5

Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise...

Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, allows credits exhaustion for an HTTP/2 connection control flow window, aka a Broke Window Attack.

Record
GHSA-c3wj-m54r-wfgq
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-770
Updated
2026-11-02
NVD 7.5

Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, allows credits exhaustion for an HTTP/2 connection control flow window, aka a Broke Window Attack.

Record
CVE-2024-30156
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-770
Updated
2026-11-02
OSVALPINE-CVE-2024-30156 7.5

Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, allows credits exhaustion for an HTTP/2 connection control flow window, aka a Broke Window Attack.

Record
ALPINE-CVE-2024-30156
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2024-30156 7.5

Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, allows credits exhaustion for an HTTP/2 connection control flow window, aka a Broke Window Attack.

Record
DEBIAN-CVE-2024-30156
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 19 moreShow less
OSVOESA-2024-1415 7.5

varnish security update

This is Varnish Cache, a web application accelerator also known as a caching HTTP reverse proxy. You install it in front of any server that speaks HTTP and configure it to cache the contents. Varnish Cache is really, really fast. It typically speeds up delivery with a factor of 300 - 1000x, depending on your architecture.

Security Fix(es):

Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, allows credits exhaustion for an HTTP/2 connection control flow window, aka a Broke Window Attack.(CVE-2024-30156)

Record
OESA-2024-1415
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:1689 7.5

Red Hat Security Advisory: rh-varnish6-varnish security update

Record
RHSA-2024:1689
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:1690 7.5

Red Hat Security Advisory: varnish security update

Record
RHSA-2024:1690
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:1691 7.5

Red Hat Security Advisory: varnish security update

Record
RHSA-2024:1691
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:2700 7.5

Red Hat Security Advisory: varnish security update

Record
RHSA-2024:2700
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:2820 7.5

Red Hat Security Advisory: varnish security update

Record
RHSA-2024:2820
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:2938 7.5

Red Hat Security Advisory: varnish:6 security update

Record
RHSA-2024:2938
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:3305 7.5

Red Hat Security Advisory: varnish:6 security update

Record
RHSA-2024:3305
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:3426 7.5

Red Hat Security Advisory: varnish:6 security update

Record
RHSA-2024:3426
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:4937 7.5

Red Hat Security Advisory: varnish:6 security update

Record
RHSA-2024:4937
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-30156 7.5

Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, allows credits exhaustion for an HTTP/2 connection control flow window, aka a Broke Window Attack.

Record
UBUNTU-CVE-2024-30156
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2024:1690 No score

Important: varnish security update

Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up.

Security Fix(es):

  • varnish: HTTP/2 Broken Window Attack may result in denial of service (CVE-2024-30156)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:1690
Updated
2026-11-02
OSVALSA-2024:1691 No score

Important: varnish security update

Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up.

Security Fix(es):

  • varnish: HTTP/2 Broken Window Attack may result in denial of service (CVE-2024-30156)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:1691
Updated
2026-11-02
OSVCLSA-2025-1763374645 No score

varnish: Fix of 2 CVEs

  • CVE-2024-30156: fix HTTP/2 flow control vulnerability allowing window credit exhaustion (Broke Window Attack) causing potential denial of service
  • CVE-2025-47905: fix client-side request smuggling via malformed HTTP/1 chunked requests
Record
CLSA-2025-1763374645
Updated
2026-11-02
OSV No score

Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, allows credits exhaustion for an HTTP/2 connection control flow window, aka a Broke Window Attack.

Record
CVE-2024-30156
Updated
2026-11-02
OSVMGASA-2024-0124 No score

Updated varnish packages fix security vulnerability

Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, allows credits exhaustion for an HTTP/2 connection control flow window, aka a Broke Window Attack. (CVE-2024-30156)

Record
MGASA-2024-0124
Updated
2026-11-02
OSVRLSA-2024:1690 No score

Important: varnish security update

Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up.

Security Fix(es):

  • varnish: HTTP/2 Broken Window Attack may result in denial of service (CVE-2024-30156)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:1690
Updated
2026-11-02
OSVRLSA-2024:1691 No score

Important: varnish security update

Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up.

Security Fix(es):

  • varnish: HTTP/2 Broken Window Attack may result in denial of service (CVE-2024-30156)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:1691
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2024-30156 No score

CVE-2024-30156 in varnish - Patched by Root

Root has patched CVE-2024-30156 in the varnish package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2024-30156
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
varnish
Alpine:v3.17
 before 7.3.2-r0
7.3.2-r0
varnish
Alpine:v3.18
 before 7.3.2-r0
7.3.2-r0
varnish
Alpine:v3.19
 before 7.4.3-r0
7.4.3-r0
varnish
Alpine:v3.20
 before 7.5.0-r0
7.5.0-r0
varnish
Alpine:v3.21
 before 7.5.0-r0
7.5.0-r0
varnish
Alpine:v3.22
 before 7.5.0-r0
7.5.0-r0
varnish
Alpine:v3.23
 before 7.5.0-r0
7.5.0-r0
varnish
Alpine:v3.24
 before 7.5.0-r0
7.5.0-r0
varnish
AlmaLinux:8
 before 6.0.13-1.module_el8.9.0+3786+e8a73bbf.alma.1
6.0.13-1.module_el8.9.0+3786+e8a73bbf.alma.1
varnish-devel
AlmaLinux:8
 before 6.0.13-1.module_el8.9.0+3786+e8a73bbf.alma.1
6.0.13-1.module_el8.9.0+3786+e8a73bbf.alma.1
Show 83 moreShow less
Affected packages
PackageAffectedFixed
varnish-docs
AlmaLinux:8
 before 6.0.13-1.module_el8.9.0+3786+e8a73bbf.alma.1
6.0.13-1.module_el8.9.0+3786+e8a73bbf.alma.1
varnish-modules
AlmaLinux:8
 before 0.15.0-6.module_el8.5.0+2620+03a0c2cc
0.15.0-6.module_el8.5.0+2620+03a0c2cc
varnish-modules
AlmaLinux:8
 before 0.15.0-6.module_el8.5.0+76+a10ffa55
0.15.0-6.module_el8.5.0+76+a10ffa55
varnish-modules
AlmaLinux:8
 before 0.15.0-6.module_el8.6.0+3089+dac88e97
0.15.0-6.module_el8.6.0+3089+dac88e97
varnish
AlmaLinux:9
 before 6.6.2-4.el9_3.1
6.6.2-4.el9_3.1
varnish-devel
AlmaLinux:9
 before 6.6.2-4.el9_3.1
6.6.2-4.el9_3.1
varnish-docs
AlmaLinux:9
 before 6.6.2-4.el9_3.1
6.6.2-4.el9_3.1
varnish
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 6.6.2-3.el9_2.1.tuxcare.els1
6.6.2-3.el9_2.1.tuxcare.els1
varnish-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 6.6.2-3.el9_2.1.tuxcare.els1
6.6.2-3.el9_2.1.tuxcare.els1
varnish-docs
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 6.6.2-3.el9_2.1.tuxcare.els1
6.6.2-3.el9_2.1.tuxcare.els1
varnish
Debian:12
 All versions, plus listed versions
7.1.1-1.17.1.1-1.1+deb12u17.1.1-1.27.1.1-2+deb12u17.5.0-1
Show 15 moreShow less
7.5.0-27.5.0-37.6.0-17.6.0-27.6.1-17.6.1-27.7.0-17.7.0-27.7.0-37.7.1-17.7.2-17.7.2-27.7.3-17.7.3-27.7.3-3
 None known
varnish
Debian:13
 before 7.5.0-1
7.5.0-1
varnish
Mageia:9
 before 7.3.2-1.mga9
7.3.2-1.mga9
varnish
openEuler:20.03-LTS-SP1
 before 7.4.3-1.oe1
7.4.3-1.oe1
varnish
openEuler:20.03-LTS-SP4
 before 7.4.3-1.oe2003sp4
7.4.3-1.oe2003sp4
varnish
openEuler:22.03-LTS
 before 7.4.3-1.oe2203sp3
7.4.3-1.oe2203sp3
varnish
openEuler:22.03-LTS-SP1
 before 7.4.3-1.oe2203sp1
7.4.3-1.oe2203sp1
varnish
openEuler:22.03-LTS-SP2
 before 7.4.3-1.oe2203sp2
7.4.3-1.oe2203sp2
varnish
openEuler:22.03-LTS-SP3
 before 7.4.3-1.oe2203sp3
7.4.3-1.oe2203sp3
rh-varnish6-varnish
Red Hat:rhel_software_collections:3::el7
 before 0:6.0.13-1.el7
0:6.0.13-1.el7
rh-varnish6-varnish-devel
Red Hat:rhel_software_collections:3::el7
 before 0:6.0.13-1.el7
0:6.0.13-1.el7
rh-varnish6-varnish-docs
Red Hat:rhel_software_collections:3::el7
 before 0:6.0.13-1.el7
0:6.0.13-1.el7
rh-varnish6-varnish-libs
Red Hat:rhel_software_collections:3::el7
 before 0:6.0.13-1.el7
0:6.0.13-1.el7
rh-varnish6-varnish-modules
Red Hat:rhel_software_collections:3::el7
 before 0:0.15.0-8.el7
0:0.15.0-8.el7
rh-varnish6-varnish-modules-debuginfo
Red Hat:rhel_software_collections:3::el7
 before 0:0.15.0-8.el7
0:0.15.0-8.el7
varnish
Red Hat:enterprise_linux:8::appstream
 before 0:6.0.13-1.module+el8.9.0+21617+7578fa11
0:6.0.13-1.module+el8.9.0+21617+7578fa11
varnish-devel
Red Hat:enterprise_linux:8::appstream
 before 0:6.0.13-1.module+el8.9.0+21617+7578fa11
0:6.0.13-1.module+el8.9.0+21617+7578fa11
varnish-docs
Red Hat:enterprise_linux:8::appstream
 before 0:6.0.13-1.module+el8.9.0+21617+7578fa11
0:6.0.13-1.module+el8.9.0+21617+7578fa11
varnish-modules
Red Hat:enterprise_linux:8::appstream
 before 0:0.15.0-6.module+el8.9.0+21617+7578fa11
0:0.15.0-6.module+el8.9.0+21617+7578fa11
varnish-modules-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:0.15.0-6.module+el8.9.0+21617+7578fa11
0:0.15.0-6.module+el8.9.0+21617+7578fa11
varnish-modules-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:0.15.0-6.module+el8.9.0+21617+7578fa11
0:0.15.0-6.module+el8.9.0+21617+7578fa11
varnish
Red Hat:enterprise_linux:9::appstream
 before 0:6.6.2-4.el9_3.1
0:6.6.2-4.el9_3.1
varnish-docs
Red Hat:enterprise_linux:9::appstream
 before 0:6.6.2-4.el9_3.1
0:6.6.2-4.el9_3.1
varnish-devel
Red Hat:enterprise_linux:9::crb
 before 0:6.6.2-4.el9_3.1
0:6.6.2-4.el9_3.1
varnish
Red Hat:rhel_eus:9.0::appstream
 before 0:6.6.2-2.el9_0.3
0:6.6.2-2.el9_0.3
varnish-docs
Red Hat:rhel_eus:9.0::appstream
 before 0:6.6.2-2.el9_0.3
0:6.6.2-2.el9_0.3
varnish-devel
Red Hat:rhel_eus:9.0::crb
 before 0:6.6.2-2.el9_0.3
0:6.6.2-2.el9_0.3
varnish
Red Hat:rhel_eus:9.2::appstream
 before 0:6.6.2-3.el9_2.2
0:6.6.2-3.el9_2.2
varnish-docs
Red Hat:rhel_eus:9.2::appstream
 before 0:6.6.2-3.el9_2.2
0:6.6.2-3.el9_2.2
varnish-devel
Red Hat:rhel_eus:9.2::crb
 before 0:6.6.2-3.el9_2.2
0:6.6.2-3.el9_2.2
varnish
Red Hat:rhel_aus:8.4::appstream
 before 0:6.0.6-2.module+el8.4.0+21799+2c737c67.5
0:6.0.6-2.module+el8.4.0+21799+2c737c67.5
varnish-devel
Red Hat:rhel_aus:8.4::appstream
 before 0:6.0.6-2.module+el8.4.0+21799+2c737c67.5
0:6.0.6-2.module+el8.4.0+21799+2c737c67.5
varnish-docs
Red Hat:rhel_aus:8.4::appstream
 before 0:6.0.6-2.module+el8.4.0+21799+2c737c67.5
0:6.0.6-2.module+el8.4.0+21799+2c737c67.5
varnish-modules
Red Hat:rhel_aus:8.4::appstream
 before 0:0.15.0-5.module+el8.3.0+6843+b3b42fcc
0:0.15.0-5.module+el8.3.0+6843+b3b42fcc
varnish-modules-debuginfo
Red Hat:rhel_aus:8.4::appstream
 before 0:0.15.0-5.module+el8.3.0+6843+b3b42fcc
0:0.15.0-5.module+el8.3.0+6843+b3b42fcc
varnish-modules-debugsource
Red Hat:rhel_aus:8.4::appstream
 before 0:0.15.0-5.module+el8.3.0+6843+b3b42fcc
0:0.15.0-5.module+el8.3.0+6843+b3b42fcc
varnish
Red Hat:rhel_e4s:8.4::appstream
 before 0:6.0.6-2.module+el8.4.0+21799+2c737c67.5
0:6.0.6-2.module+el8.4.0+21799+2c737c67.5
varnish-devel
Red Hat:rhel_e4s:8.4::appstream
 before 0:6.0.6-2.module+el8.4.0+21799+2c737c67.5
0:6.0.6-2.module+el8.4.0+21799+2c737c67.5
varnish-docs
Red Hat:rhel_e4s:8.4::appstream
 before 0:6.0.6-2.module+el8.4.0+21799+2c737c67.5
0:6.0.6-2.module+el8.4.0+21799+2c737c67.5
varnish-modules
Red Hat:rhel_e4s:8.4::appstream
 before 0:0.15.0-5.module+el8.3.0+6843+b3b42fcc
0:0.15.0-5.module+el8.3.0+6843+b3b42fcc
varnish-modules-debuginfo
Red Hat:rhel_e4s:8.4::appstream
 before 0:0.15.0-5.module+el8.3.0+6843+b3b42fcc
0:0.15.0-5.module+el8.3.0+6843+b3b42fcc
varnish-modules-debugsource
Red Hat:rhel_e4s:8.4::appstream
 before 0:0.15.0-5.module+el8.3.0+6843+b3b42fcc
0:0.15.0-5.module+el8.3.0+6843+b3b42fcc
varnish
Red Hat:rhel_tus:8.4::appstream
 before 0:6.0.6-2.module+el8.4.0+21799+2c737c67.5
0:6.0.6-2.module+el8.4.0+21799+2c737c67.5
varnish-devel
Red Hat:rhel_tus:8.4::appstream
 before 0:6.0.6-2.module+el8.4.0+21799+2c737c67.5
0:6.0.6-2.module+el8.4.0+21799+2c737c67.5
varnish-docs
Red Hat:rhel_tus:8.4::appstream
 before 0:6.0.6-2.module+el8.4.0+21799+2c737c67.5
0:6.0.6-2.module+el8.4.0+21799+2c737c67.5
varnish-modules
Red Hat:rhel_tus:8.4::appstream
 before 0:0.15.0-5.module+el8.3.0+6843+b3b42fcc
0:0.15.0-5.module+el8.3.0+6843+b3b42fcc
varnish-modules-debuginfo
Red Hat:rhel_tus:8.4::appstream
 before 0:0.15.0-5.module+el8.3.0+6843+b3b42fcc
0:0.15.0-5.module+el8.3.0+6843+b3b42fcc
varnish-modules-debugsource
Red Hat:rhel_tus:8.4::appstream
 before 0:0.15.0-5.module+el8.3.0+6843+b3b42fcc
0:0.15.0-5.module+el8.3.0+6843+b3b42fcc
varnish
Red Hat:rhel_eus:8.8::appstream
 before 0:6.0.8-3.module+el8.8.0+21796+79393093.2
0:6.0.8-3.module+el8.8.0+21796+79393093.2
varnish-devel
Red Hat:rhel_eus:8.8::appstream
 before 0:6.0.8-3.module+el8.8.0+21796+79393093.2
0:6.0.8-3.module+el8.8.0+21796+79393093.2
varnish-docs
Red Hat:rhel_eus:8.8::appstream
 before 0:6.0.8-3.module+el8.8.0+21796+79393093.2
0:6.0.8-3.module+el8.8.0+21796+79393093.2
varnish-modules
Red Hat:rhel_eus:8.8::appstream
 before 0:0.15.0-6.module+el8.5.0+11976+0b4af72d
0:0.15.0-6.module+el8.5.0+11976+0b4af72d
varnish-modules-debuginfo
Red Hat:rhel_eus:8.8::appstream
 before 0:0.15.0-6.module+el8.5.0+11976+0b4af72d
0:0.15.0-6.module+el8.5.0+11976+0b4af72d
varnish-modules-debugsource
Red Hat:rhel_eus:8.8::appstream
 before 0:0.15.0-6.module+el8.5.0+11976+0b4af72d
0:0.15.0-6.module+el8.5.0+11976+0b4af72d
varnish
Red Hat:rhel_eus:8.6::appstream
 before 0:6.0.8-2.module+el8.6.0+21852+17475f6a.3
0:6.0.8-2.module+el8.6.0+21852+17475f6a.3
varnish-devel
Red Hat:rhel_eus:8.6::appstream
 before 0:6.0.8-2.module+el8.6.0+21852+17475f6a.3
0:6.0.8-2.module+el8.6.0+21852+17475f6a.3
varnish-docs
Red Hat:rhel_eus:8.6::appstream
 before 0:6.0.8-2.module+el8.6.0+21852+17475f6a.3
0:6.0.8-2.module+el8.6.0+21852+17475f6a.3
varnish-modules
Red Hat:rhel_eus:8.6::appstream
 before 0:0.15.0-6.module+el8.5.0+11976+0b4af72d
0:0.15.0-6.module+el8.5.0+11976+0b4af72d
varnish-modules-debuginfo
Red Hat:rhel_eus:8.6::appstream
 before 0:0.15.0-6.module+el8.5.0+11976+0b4af72d
0:0.15.0-6.module+el8.5.0+11976+0b4af72d
varnish-modules-debugsource
Red Hat:rhel_eus:8.6::appstream
 before 0:0.15.0-6.module+el8.5.0+11976+0b4af72d
0:0.15.0-6.module+el8.5.0+11976+0b4af72d
varnish
Red Hat:rhel_aus:8.2::appstream
 before 0:6.0.6-1.module+el8.2.0+22154+6b906702
0:6.0.6-1.module+el8.2.0+22154+6b906702
varnish-devel
Red Hat:rhel_aus:8.2::appstream
 before 0:6.0.6-1.module+el8.2.0+22154+6b906702
0:6.0.6-1.module+el8.2.0+22154+6b906702
varnish-docs
Red Hat:rhel_aus:8.2::appstream
 before 0:6.0.6-1.module+el8.2.0+22154+6b906702
0:6.0.6-1.module+el8.2.0+22154+6b906702
varnish-modules
Red Hat:rhel_aus:8.2::appstream
 before 0:0.15.0-4.module+el8+2481+4078e9d2
0:0.15.0-4.module+el8+2481+4078e9d2
varnish-modules-debuginfo
Red Hat:rhel_aus:8.2::appstream
 before 0:0.15.0-4.module+el8+2481+4078e9d2
0:0.15.0-4.module+el8+2481+4078e9d2
varnish-modules-debugsource
Red Hat:rhel_aus:8.2::appstream
 before 0:0.15.0-4.module+el8+2481+4078e9d2
0:0.15.0-4.module+el8+2481+4078e9d2
varnish
Rocky Linux:8
 before 0:6.0.13-1.module+el8.9.0+1777+0acf9965
0:6.0.13-1.module+el8.9.0+1777+0acf9965
varnish-modules
Rocky Linux:8
 before 0:0.15.0-6.module+el8.5.0+677+2a78a869
0:0.15.0-6.module+el8.5.0+677+2a78a869
varnish
Rocky Linux:9
 before 0:6.6.2-4.el9_3.1
0:6.6.2-4.el9_3.1
varnish
Root:Debian:12
 before 7.1.1-2+deb12u1.root.io.2
7.1.1-2+deb12u1.root.io.27.1.1-2+deb12u1.root.io.67.1.1-2+deb12u1.root.io.47.1.1-2+deb12u1.root.io.17.1.1-2+deb12u1.root.io.37.1.1-2+deb12u1.root.io.57.1.1-2+deb12u1.root.io.77.1.1-2+deb12u1.aikido.8
rootio-varnish
Root:Debian:12
 before 7.1.1-2+deb12u1.root.io.2
7.1.1-2+deb12u1.root.io.27.1.1-2+deb12u1.root.io.67.1.1-2+deb12u1.root.io.47.1.1-2+deb12u1.root.io.17.1.1-2+deb12u1.root.io.37.1.1-2+deb12u1.root.io.57.1.1-2+deb12u1.root.io.77.1.1-2+deb12u1.aikido.8
varnish
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.2-16.6.1-16.6.1-1ubuntu0.2
 None known
varnish
Ubuntu:24.04:LTS
 All versions, plus listed versions
7.1.1-1.1ubuntu1
 None known

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-30156 is a high vulnerability (CVSS 7.5) in varnish, published March 24, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.66%, the 89th percentile. Fixed in varnish 7.3.2-r0.

References

Show 33 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open