1 result · Clear filters · Feed
-
High 7.5
sniproxy through 0.7.0 NULL Pointer Dereference via resolv_cancel()
sniproxy through 0.7.0 contains a NULL pointer dereference vulnerability in resolv_cancel() that allows remote unauthenticated attackers to crash the daemon by sending overlong hostnames. Attackers can send a 254 or 255 character TLS SNI name or HTTP Host hea…