CVE-2025-30347

varnish-software / Varnish Enterprise PUBLISHED

Description (CNA)

Varnish Enterprise before 6.0.13r13 allows remote attackers to obtain sensitive information via an out-of-bounds read for range requests on ephemeral MSE4 stevedore objects.

Affected (CNA)

Vendor / product	Versions
varnish-software / Varnish Enterprise	affected 6 before 6.0.13r13

CWE

CWE-125

References

https://docs.varnish-software.com/security/VEV00001/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.