Skip to content
OpenAdvisories

Package · Debian

sniproxy

2 known vulnerabilities.

2 results · Feed

  • High 7.5

    sniproxy through 0.7.0 NULL Pointer Dereference via resolv_cancel()

    sniproxy through 0.7.0 contains a NULL pointer dereference vulnerability in resolv_cancel() that allows remote unauthenticated attackers to crash the daemon by sending overlong hostnames. Attackers can send a 254 or 255 character TLS SNI name or HTTP Host hea…

  • Critical 9.8
    CVE-2023-25076 EPSS 66%

    A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy 0.6.0-2 and the master bra…