Cpe:2.3:a:sniproxy:sniproxy:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3asniproxysniproxy/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 30 Oct 2026 23:46:22 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgsniproxy: NULL pointer dereference in resolv_cancel (CVE-2026-119760)https://feed.craftedsignal.io/briefs/2026-10-sniproxy-null-pointer/Fri, 30 Oct 2026 23:46:22 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-sniproxy-null-pointer/sniproxy through 0.7.0 contains a NULL pointer dereference vulnerability in resolv_cancel() that allows remote unauthenticated attackers to crash the daemon by sending overlong hostnames.<p>sniproxy through 0.7.0 contains a NULL pointer dereference vulnerability in <code>resolv_cancel()</code> that allows remote unauthenticated attackers to crash the daemon. Attackers can send a 254 or 255 character TLS SNI name or HTTP Host header matching a wildcard backend, then close the connection to terminate the proxy.</p> lowadvisory