2 results · Feed
-
High 7.5
sniproxy through 0.7.0 NULL Pointer Dereference via resolv_cancel()
sniproxy through 0.7.0 contains a NULL pointer dereference vulnerability in resolv_cancel() that allows remote unauthenticated attackers to crash the daemon by sending overlong hostnames. Attackers can send a 254 or 255 character TLS SNI name or HTTP Host hea…
-
Critical 9.8CVE-2023-25076 EPSS 66%
A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy 0.6.0-2 and the master bra…