CVE-2023-25076

Опубликовано: 30 мар. 2023

Источник: nvd

CVSS3: 9.8

EPSS Средний

Описание

A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy 0.6.0-2 and the master branch (commit: 822bb80df9b7b345cc9eba55df74a07b498819ba). A specially crafted HTTP or TLS packet can lead to arbitrary code execution. An attacker could send a malicious packet to trigger this vulnerability.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sniproxy_project:sniproxy:0.6.0-2:*:*:*:*:*:*:*

cpe:2.3:a:sniproxy_project:sniproxy:0.6.1:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.33631

Средний

9.8 Critical

CVSS3

Дефекты

CWE-120

Связанные уязвимости

CVE-2023-25076

CVSS3: 9.8

ubuntu

почти 3 года назад

CVE-2023-25076

CVSS3: 9.8

debian

почти 3 года назад

A buffer overflow vulnerability exists in the handling of wildcard bac ...

GHSA-fhgm-rvpq-xwx9

CVSS3: 9.8

github

почти 3 года назад

A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy 0.6.0-2 and the master branch (commit: 822bb80df9b7b345cc9eba55df74a07b498819ba). A specially crafted HTTP, TLS or DTLS packet can lead to arbitrary code execution. An attacker could send a malicious packet to trigger this vulnerability.

EPSS

Процентиль: 97%

0.33631

Средний

9.8 Critical

CVSS3

Дефекты

CWE-120