sniproxy: NULL pointer dereference in resolv_cancel (CVE-2026-119760)
sniproxy through 0.7.0 contains a NULL pointer dereference vulnerability in resolv_cancel() that allows remote unauthenticated attackers to crash the daemon by sending overlong hostnames.
CVE search metadata
CVE search record: CVE-2026-119760. Severity: high. CVSS: 7.5. KEV: no. Product: sniproxy (through 0.7.0). Brief: sniproxy: NULL pointer dereference in resolv_cancel (CVE-2026-119760). Brief link: https://feed.craftedsignal.io/briefs/2026-10-sniproxy-null-pointer/
Triage facts
Revision 1- Applicability
- sniproxy (through 0.7.0)
- Evidence
- Unknown
- Severity
- Low
- Sources
- 1 public source
- Freshness
- Revision 1Oct 30, 23:46 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
sniproxy through 0.7.0 contains a NULL pointer dereference vulnerability in resolv_cancel() that allows remote unauthenticated attackers to crash the daemon. Attackers can send a 254 or 255 character TLS SNI name or HTTP Host header matching a wildcard backend, then close the connection to terminate the proxy.