CVE-2024-30156
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-30156
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-30156.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2024-30156
- Downstream
- Related
- Published
- 2024-03-24T01:15:45Z
- Modified
- 2025-08-09T20:01:26Z
- Summary
- [none]
- Details
-
Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, allows credits exhaustion for an HTTP/2 connection control flow window, aka a Broke Window Attack.
- References