VDB

GCVE-110-MAGEIA-2024-124

GCVE-110-MAGEIA-2024-124
Advisory Published
Vulnetix · Advisory published April 12, 2024
Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, allows credits exhaustion for an HTTP/2 connection control flow window, aka a Broke Window Attack. (CVE-2024-30156)

Affected Products

VendorProductVersionsPlatforms
Mageiavarnish0 (affected), 7.3.2-1.mga9 (unaffected), 7.3.2-1.mga9 (unaffected), 0 (affected)
Mageiahaproxy2.8.9-1.mga9 (unaffected), 0 (affected)

Browse GCVE Records

73,443 records in the GCVE database · Updated July 18, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›