An issue has been found in sniproxy, a transparent TLS and HTTP layer 4 proxy with SNI support. Due to bad handling of wildcard backend hosts, a crafted HTTP or TLS packet might lead to remote arbitrary code execution. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-5413-1
A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy. A specially crafted HTTP or TLS packet can lead to arbitrary code execution. An attacker could send a malicious packet to trigger this vulnerability. (CVE-2023-25076) . MGASA-2023-0178 - Updated sniproxy packages fix security vulnerability Publication date: 21 May 2023 URL: https://advisories.mageia.org/MGASA-2023-0178.html Type: security Affected Mageia releases: 8 CVE: A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy. A specially crafted HTTP or TLS packet can lead to arbitrary code execution. An attacker could send a malicious packet to trigger this vulnerability. (CVE-2023-25076) References: - https://bugs.mageia.org/show_bug.cgi?id=31879 - https://lists.debian.org/debian-lts-announce/2023/04/msg00030.html - https://www.cve.org/CVERecord?id=CVE-undefined SRPMS: - 8/core/sniproxy-0.6.1-1.mga8 . Recent updates to sniproxy packages are essential for addressing a buffer overflow security flaw identified on May 21, 2023.. Buffer Overflow, SNIProxy, Mageia Security. . LinuxSecurity.com Team
An issue has been found in sniproxy, a transparent TLS and HTTP layer 4 proxy with SNI support. Due to bad handling of wildcard backend hosts, a crafted HTTP or TLS . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3406-1
Get the latest Linux and open source security news straight to your inbox.