Skip to content
OpenAdvisories

Package · Ubuntu

sniproxy

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5

    sniproxy through 0.7.0 NULL Pointer Dereference via resolv_cancel()

    sniproxy through 0.7.0 contains a NULL pointer dereference vulnerability in resolv_cancel() that allows remote unauthenticated attackers to crash the daemon by sending overlong hostnames. Attackers can send a 254 or 255 character TLS SNI name or HTTP Host hea…