CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2025-30347
https://notcve.org/view.php?id=CVE-2025-30347
21 Mar 2025 — Varnish Enterprise before 6.0.13r13 allows remote attackers to obtain sensitive information via an out-of-bounds read for range requests on ephemeral MSE4 stevedore objects. • https://docs.varnish-software.com/security/VEV00001 • CWE-125: Out-of-bounds Read •
CVSS: 6.5EPSS: 0%CPEs: 7EXPL: 0CVE-2023-41104
https://notcve.org/view.php?id=CVE-2023-41104
23 Aug 2023 — libvmod-digest before 1.0.3, as used in Varnish Enterprise 6.0.x before 6.0.11r5, has an out-of-bounds memory access during base64 decoding, leading to both authentication bypass and information disclosure; however, the exact attack surface will depend on the particular VCL (Varnish Configuration Language) configuration in use. • https://docs.varnish-software.com/security/VSV00012 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •