Varnish-Software Vmod Digest vulnerabilities

1 known vulnerability affecting varnish-software/vmod_digest.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2023-41104MEDIUMCVSS 6.5fixed in 1.0.32023-08-23
CVE-2023-41104 [MEDIUM] CWE-119 CVE-2023-41104: libvmod-digest before 1.0.3, as used in Varnish Enterprise 6.0.x before 6.0.11r5, has an out-of-boun libvmod-digest before 1.0.3, as used in Varnish Enterprise 6.0.x before 6.0.11r5, has an out-of-bounds memory access during base64 decoding, leading to both authentication bypass and information disclosure; however, the exact attack surface will depend on the particular VCL (Varnish Configuration Language) configuration in use.
nvd