Threats tagged 'ghsa-v5q9-7x5c-3phf'

sniproxy versions through 0.7.0 have a NULL pointer dereference vulnerability in the resolv_cancel() function. This flaw allows remote unauthenticated attackers to crash the sniproxy daemon by sending overlong hostnames, specifically TLS SNI names or HTTP Host headers of 254 or 255 characters that match a wildcard backend, then closing the connection to terminate the proxy process.