Lucene search
K

29 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:2 a.m.2 views

CVE-2023-25076

A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy 0.6.0-2 and the master branch commit: 822bb80df9b7b345cc9eba55df74a07b498819ba. A specially crafted HTTP or TLS packet can lead to arbitrary code execution. An attacker could send a malicious packet to...

9.8CVSS7.8AI score0.29668EPSS
Exploits1References1
Veracode
Veracode
added 2023/08/06 8:34 p.m.14 views

Arbitrary Code Execution

sniproxy is vulnerable to Arbitrary Code Execution. The vulnerability exists due to a buffer overflow which allows an attacker to use a specially crafted HTTP or TLS packet that can lead to arbitrary code execution...

9.8CVSS7.8AI score0.29668EPSS
Exploits1References6Affected Software1
OpenVAS
OpenVAS
added 2023/06/13 12:0 a.m.11 views

Ubuntu: Security Advisory (USN-6148-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.29668EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2023/05/29 12:0 a.m.8 views

Debian: Security Advisory (DSA-5413-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.29668EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2023/05/27 12:0 a.m.16 views

Debian DSA-5413-1 : sniproxy - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dsa-5413 advisory. An issue has been found in sniproxy, a transparent TLS and HTTP layer 4 proxy with SNI support. Due to bad handling of wildcard backend hosts, a crafted HTTP or TLS packet...

9.8CVSS8.3AI score0.29668EPSS
Exploits1References6
Debian
Debian
added 2023/05/26 1:19 p.m.16 views

[SECURITY] [DSA 5413-1] sniproxy security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5413-1 [email protected] https://www.debian.org/security/ Thorsten Alteholz May 26, 2023 https://www.debian.org/security/faq -...

9.8CVSS6.8AI score0.29668EPSS
Exploits1
OSV
OSV
added 2023/05/26 12:0 a.m.15 views

DSA-5413-1 sniproxy - security update

Bulletin has no description...

9.8CVSS9.3AI score0.29668EPSS
Exploits1
OpenVAS
OpenVAS
added 2023/05/22 12:0 a.m.10 views

Mageia: Security Advisory (MGASA-2023-0178)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.29668EPSS
Exploits1References4
OSV
OSV
added 2023/05/21 8:42 a.m.4 views

MGASA-2023-0178 Updated sniproxy packages fix security vulnerability

A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy. A specially crafted HTTP or TLS packet can lead to arbitrary code execution. An attacker could send a malicious packet to trigger this vulnerability. CVE-2023-25076...

9.8CVSS9.7AI score0.29668EPSS
Exploits1References3
Mageia
Mageia
added 2023/05/21 8:42 a.m.34 views

Updated sniproxy packages fix security vulnerability

A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy. A specially crafted HTTP or TLS packet can lead to arbitrary code execution. An attacker could send a malicious packet to trigger this vulnerability. CVE-2023-25076...

9.8CVSS7.9AI score0.29668EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2023/05/02 12:0 a.m.10 views

Debian: Security Advisory (DLA-3406-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.29668EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2023/05/01 12:0 a.m.14 views

Debian dla-3406 : sniproxy - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3406 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3406-1 [email protected] https://www.debian.org/lts/security/...

9.8CVSS8.4AI score0.29668EPSS
Exploits1References4
Debian
Debian
added 2023/04/30 11:5 a.m.15 views

[SECURITY] [DLA 3406-1] sniproxy security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3406-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz April 30, 2023 https://wiki.debian.org/LTS -...

9.8CVSS9.5AI score0.29668EPSS
Exploits1
OSV
OSV
added 2023/04/30 12:0 a.m.32 views

DLA-3406-1 sniproxy - security update

Bulletin has no description...

9.8CVSS9.3AI score0.29668EPSS
Exploits1
OSV
OSV
added 2023/03/30 3:15 p.m.1 views

DEBIAN-CVE-2023-25076

A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy 0.6.0-2 and the master branch commit: 822bb80df9b7b345cc9eba55df74a07b498819ba. A specially crafted HTTP or TLS packet can lead to arbitrary code execution. An attacker could send a malicious packet to...

9.8CVSS9.2AI score0.29668EPSS
Exploits1References1
AlpineLinux
AlpineLinux
added 2023/03/30 3:15 p.m.28 views

CVE-2023-25076

A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy 0.6.0-2 and the master branch commit: 822bb80df9b7b345cc9eba55df74a07b498819ba. A specially crafted HTTP or TLS packet can lead to arbitrary code execution. An attacker could send a malicious packet to...

9.8CVSS9.7AI score0.29668EPSS
Exploits1References4
OSV
OSV
added 2023/03/30 3:15 p.m.6 views

CVE-2023-25076

A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy 0.6.0-2 and the master branch commit: 822bb80df9b7b345cc9eba55df74a07b498819ba. A specially crafted HTTP or TLS packet can lead to arbitrary code execution. An attacker could send a malicious packet to...

9.8CVSS10AI score
Exploits0References5
NVD
NVD
added 2023/03/30 3:15 p.m.7 views

CVE-2023-25076

A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy 0.6.0-2 and the master branch commit: 822bb80df9b7b345cc9eba55df74a07b498819ba. A specially crafted HTTP or TLS packet can lead to arbitrary code execution. An attacker could send a malicious packet to...

9.8CVSS9.7AI score0.29668EPSS
Exploits1References5
OSV
OSV
added 2023/03/30 3:15 p.m.0 views

UBUNTU-CVE-2023-25076

A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy 0.6.0-2 and the master branch commit: 822bb80df9b7b345cc9eba55df74a07b498819ba. A specially crafted HTTP or TLS packet can lead to arbitrary code execution. An attacker could send a malicious packet to...

9.8CVSS7.8AI score0.29668EPSS
Exploits1References5
Prion
Prion
added 2023/03/30 3:15 p.m.12 views

Buffer overflow

A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy 0.6.0-2 and the master branch commit: 822bb80df9b7b345cc9eba55df74a07b498819ba. A specially crafted HTTP or TLS packet can lead to arbitrary code execution. An attacker could send a malicious packet to...

7.5CVSS9.6AI score0.29668EPSS
Exploits1References4Affected Software1
Rows per page
Query Builder