Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-119760 1 Sniproxy Project 1 Sniproxy 2026-11-05 7.5 High
sniproxy through 0.7.0 contains a NULL pointer dereference vulnerability in resolv_cancel() that allows remote unauthenticated attackers to crash the daemon by sending overlong hostnames. Attackers can send a 254 or 255 character TLS SNI name or HTTP Host header matching a wildcard backend, then close the connection to terminate the proxy.