Summary
It was discovered that SNI Proxy did not properly handle wildcard backend
hosts. An attacker could possibly use this issue to cause a buffer overflow,
resulting in a denial of service, or arbitrary code execution.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | sniproxy | 0.6.0-1ubuntu0.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | sniproxy | 0.6.0-2ubuntu0.22.04.1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | sniproxy | 0.5.0-2ubuntu0.1~esm1 |
Vulnerabilities 1
-
Critical 9.8CVE-2023-25076 EPSS 66%
A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy 0.6.0-2 and the master bra…
References
-
report
https://ubuntu.com/security/CVE-2023-25076