There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - An issue was discovered in Varnish HTTP Cache 4.0.1 through 4.0.4, 4.1.0 through 4.1.7, 5.0.0, and 5.1.0
    through 5.1.2. A wrong if statement in the varnishd source code means that particular invalid requests
    from the client can trigger an assert, related to an Integer Overflow. This causes the varnishd worker
    process to abort and restart, losing the cached contents in the process. An attacker can therefore crash
    the varnishd worker process on demand and effectively keep it from serving content - a Denial-of-Service
    attack. The specific source-code filename containing the incorrect statement varies across releases.
    (CVE-2017-12425)

在尖端的高效能 web 加速器 Varnish 中發現一個拒絕服務弱點。特製的 HTTP 要求可造成 Varnish 程序宣告和重新啟動，清除處理程序中的快取。詳情請參閱 https://varnish-cache.org/security/VSV00001.html。

在先进的高性能 web 加速器 Varnish 中发现一个拒绝服务漏洞。特制的 HTTP 请求可能导致 Varnish 后台程序断言并重新启动，从而清除进程中的缓存。有关详细信息，请参阅：https://varnish-cache.org/security/VSV00001.html。

新しい Upstream リリース。これは、サービス拒否攻撃で使用される可能性があるクラッシュバグCVE-2017-12425の修正を含むセキュリティリリースです。Upstreamプロジェクトの詳細については、次を参照してください：

http://varnish-cache.org/security/VSV00001.html

注意：Tenable Network Securityは、前述の記述ブロックをFedora更新システムのWebサイトから直接抽出しています。
Tenableでは、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

最新式で高性能なWebアクセラレータであるVarnishに、サービス拒否の脆弱性があることが発見されました。特別に細工されたHTTPリクエストにより、Varnishデーモンがアサートして再起動し、プロセスのキャッシュを消去する可能性があります。

詳細については、https://varnish-cache.org/security/VSV00001.htmlを参照してください。

New upstream release. This is a security release with a fix for CVE-2017-12425, a crash bug that might be used in a denial of service attack. Details from the upstream project are found here :

http://varnish-cache.org/security/VSV00001.html

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A denial of service vulnerability was discovered in Varnish, a state of the art, high-performance web accelerator. Specially crafted HTTP requests can cause the Varnish daemon to assert and restart, clearing the cache in the process.

See https://varnish-cache.org/security/VSV00001.html for details.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
424642	Alpine: multiple varnish packages: security update to 5.1.3-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2025/4/4	2026/7/2	high
424642	Alpine: multiple varnish packages: security update to 5.1.3-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2025/4/4	2026/7/2	high
407450	Alpine: varnish: security update to 4.1.2-r4	Tenable Cloud Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	high
407450	Alpine: varnish: security update to 4.1.2-r4	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	high
407449	Alpine: varnish: security update to 4.1.2-r2	Tenable Cloud Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	high
407451	Alpine: varnish: security update to 4.1.3-r1	Tenable Cloud Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	high
407449	Alpine: varnish: security update to 4.1.2-r2	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	high
407451	Alpine: varnish: security update to 4.1.3-r1	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	high
102135	Debian DSA-3924-1：varnish - 安全性更新	Nessus	Debian Local Security Checks	2017/8/3	2025/12/4	high
102135	Debian DSA-3924-1：varnish - 安全更新	Nessus	Debian Local Security Checks	2017/8/3	2025/12/4	high
102485	Fedora 26：varnish（2017-8f4fba5afa）	Nessus	Fedora Local Security Checks	2017/8/15	2025/11/26	high
102135	DebianDSA-3924-1：varnish - セキュリティ更新	Nessus	Debian Local Security Checks	2017/8/3	2025/12/4	high
102489	Fedora 25：varnish（2017-bfbc5de1b1）	Nessus	Fedora Local Security Checks	2017/8/15	2025/11/26	high
102485	Fedora 26 : varnish (2017-8f4fba5afa)	Nessus	Fedora Local Security Checks	2017/8/15	2025/11/26	high
102489	Fedora 25 : varnish (2017-bfbc5de1b1)	Nessus	Fedora Local Security Checks	2017/8/15	2025/11/26	high
102135	Debian DSA-3924-1 : varnish - security update	Nessus	Debian Local Security Checks	2017/8/3	2025/12/4	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high