Varnish Cache CVE-2025-8671 VSV00017

MEDIUM

N/A vendor:alpine

Information Disclosure

Lifecycle Timeline

Analysis Generated

May 27, 2026 - 23:03 vuln.today

DescriptionCVE.org

Alpine Linux: varnish fixed in 7.7.2-r0

AnalysisAI

Varnish Cache on Alpine Linux received a security fix packaged as 7.7.2-r0, addressing CVE-2025-8671, also tracked internally by the Varnish project as VSV00017. The vulnerability details, including attack vector, impact type, and affected component, are not disclosed in the available intelligence data. The fix was reported by the Alpine Linux vendor, indicating this is a security-relevant package update. No active exploitation (KEV) or public exploit code has been identified in the provided data.

Technical ContextAI

Varnish Cache is a widely deployed HTTP reverse proxy and caching accelerator used to offload origin servers and accelerate web delivery. It is commonly placed in front of web applications and APIs as a performance and availability layer. The Alpine Linux package version 7.7.2-r0 corresponds to an upstream Varnish release that includes a security fix designated VSV00017 - the Varnish project's own sequential security advisory numbering scheme. No CWE root cause classification, CPE string, or affected subsystem (e.g., VCL processing, ESI parsing, HTTP/2 handling) is present in the available data, preventing further technical root cause analysis.

Affected ProductsAI

Varnish Cache as packaged for Alpine Linux in versions prior to 7.7.2-r0 is confirmed affected per the Alpine Linux vendor report. The upstream Varnish version corresponding to Alpine package 7.7.2-r0 is Varnish 7.7.2. Exact version ranges below 7.7.2 that are vulnerable, and whether other distributions or upstream tarballs are independently affected, are not determinable from the available data. No CPE string was provided. Consumers of Varnish on other Linux distributions (Debian, RHEL, etc.) should consult their respective vendor advisories and the upstream Varnish VSV00017 advisory for applicability.

RemediationAI

Upgrade the Alpine Linux varnish package to version 7.7.2-r0 or later using the standard Alpine package manager: 'apk upgrade varnish'. This is the vendor-confirmed fix per the Alpine Linux security report. No specific workarounds or compensating controls are documented in the available data. Because the vulnerability type is unknown, no targeted configuration-based mitigations can be responsibly recommended without risking incomplete protection. Operators running Varnish on other platforms should consult the upstream VSV00017 advisory at the Varnish project's official security page to determine the applicable fix version and any available interim mitigations.