CVE-2023-25076

A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy 0.6.0-2 and the master branch (commit: 822bb80df9b7b345cc9eba55df74a07b498819ba). A specially crafted HTTP or TLS packet can lead to arbitrary code execution. An attacker could send a malicious packet to trigger this vulnerability.

• CWE-120

• https://github.com/dlundquist/sniproxy/commit/f8d9a433fe22ab2fa15c00179048ab02ae23d583Patch
• https://lists.debian.org/debian-lts-announce/2023/04/msg00030.html
• https://talosintelligence.com/vulnerability_reports/TALOS-2023-1731Exploit, Mitigation, Third Party Advisory
• https://www.debian.org/security/2023/dsa-5413
• https://github.com/dlundquist/sniproxy/commit/f8d9a433fe22ab2fa15c00179048ab02ae23d583Patch
• https://lists.debian.org/debian-lts-announce/2023/04/msg00030.html
• https://talosintelligence.com/vulnerability_reports/TALOS-2023-1731Exploit, Mitigation, Third Party Advisory
• https://www.debian.org/security/2023/dsa-5413
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1731

Published

Mar 30, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-25070Cleartext transmission of sensitive information exists in Sk…6.5
• CVE-2023-25071NULL pointer dereference in some Intel(R) Arc(TM) & Iris(R) …5.5
• CVE-2023-25072Use of weak credentials exists in SkyBridge MB-A100/110 firm…7.5
• CVE-2023-25073Improper access control in some Intel(R) DSA software before…5.5
• CVE-2023-25074 Improper privilege validation in Command Centre Server allo…5.4
• CVE-2023-25075Unquoted search path in the installer for some Intel Server …7.8
• CVE-2023-25077Cross-site scripting vulnerability in Authentication Key Set…5.4
• CVE-2023-25078Server or Console Station DoS due to heap overflow occurring…7.5
• CVE-2023-2508The `PaperCutNG Mobility Print` version 1.0.3512 application…6.5
• CVE-2023-25080Protection mechanism failure in some Intel(R) Distribution o…5.5
• CVE-2023-25081Multiple buffer overflow vulnerabilities exist in the vtysh_…7.2
• CVE-2023-25082Multiple buffer overflow vulnerabilities exist in the vtysh_…7.2