VDB
GCVE-VVD-MAGEIA-2017-435
GCVE-VVD-MAGEIA-2017-435
Advisory Published
vbf_stp_error in bin/varnishd/cache/cache_fetch.c in Varnish HTTP Cache
4.1.x before 4.1.9 and 5.x before 5.2.1 allows remote attackers to
obtain sensitive information from process memory because a
VFP_GetStorage buffer is larger than intended in certain circumstances
involving -sfile Stevedore transient objects. (CVE-2017-8807)
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | varnish | 0 (affected), 5.0.0-3.2.mga6 (unaffected) | — |
Browse GCVE Records
100 records in the GCVE database · Updated April 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.