NULL Pointer Dereference Vulnerability in sniproxy from David Lundquist
CVE-2026-119760

8.7HIGH

Key Information:

Vendor

Dlundquist

Status
Sniproxy
Vendor
CVE Published:
30 October 2026

What is CVE-2026-119760?

The sniproxy software, up to version 0.7.0, is susceptible to a NULL pointer dereference vulnerability within the resolv_cancel() function. This flaw allows remote attackers to exploit the system by sending excessively long hostnames, specifically TLS SNI names or HTTP Host headers consisting of 254 or 255 characters. By doing so, attackers can effectively crash the daemon when they subsequently terminate the connection, resulting in a denial of service. Prompt patching is recommended to mitigate this risk.

Affected Version(s)

sniproxy 0 <= 0.7.0

References

https://github.com/dlundquist/sniproxy/issues/411
issue-tracking
https://github.com/dlundquist/sniproxy/blob/1cc625ea41796...
technical-description
https://github.com/dlundquist/sniproxy/blob/1cc625ea41796...
technical-description

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Renaud Allard
.