Information on source package varnish

Available versions

Bug	stretch	buster	bullseye	bookworm	sid	Description
CVE-2021-36740	vulnerable (no DSA, ignored)	vulnerable	vulnerable	fixed	fixed	Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL a ...
CVE-2020-11653	fixed	vulnerable (no DSA, postponed)	fixed	fixed	fixed	An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6 ...
CVE-2019-20637	vulnerable (no DSA)	vulnerable (no DSA)	fixed	fixed	fixed	An issue was discovered in Varnish Cache before 6.0.5 LTS, 6.1.x and 6 ...

Bug	stretch	buster	bullseye	bookworm	sid	Description
CVE-2009-4488	vulnerable	vulnerable	vulnerable	vulnerable	vulnerable	DISPUTED Varnish 2.0.6 writes data to a log file without sanitiz ...

Bug	Description
CVE-2019-15892	An issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x a ...
CVE-2017-12425	An issue was discovered in Varnish HTTP Cache 4.0.1 through 4.0.4, 4.1 ...
CVE-2017-8807	vbf_stp_error in bin/varnishd/cache/cache_fetch.c in Varnish HTTP Cach ...
CVE-2015-8852	Varnish 3.x before 3.0.7, when used in certain stacked installations, ...
CVE-2013-4484	Varnish before 3.0.5 allows remote attackers to cause a denial of serv ...
CVE-2013-4090	Varnish HTTP cache before 3.0.4: ACL bug ...
CVE-2013-0345	varnish 3.0.3 uses world-readable permissions for the /var/log/varnish ...
CVE-2009-2936	DISPUTED The Command Line Interface (aka Server CLI or administr ...