MidnightBSD

Advisories for dest-unreach

CVE-2010-2799 MEDIUM

Stack-based buffer overflow in the nestlex function in nestlex.c in Socat 1.5.0.0 through 1.7.1.2 and 2.0.0-b1 through 2.0.0-b3, when bidirectional data relay is enabled, allows context-dependent attackers to execute arbitrary code via long command-line arguments.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-119,

Products Affected

Vendor Product Version
dest-unreach socat 1.5.0.0
dest-unreach socat 2.0.0
dest-unreach socat 1.7.1.0
dest-unreach socat 1.7.0.1
dest-unreach socat 1.6.0.1
dest-unreach socat 1.7.1.1
dest-unreach socat 1.6.0.0
dest-unreach socat 1.7.0.0
CVE-2012-0219 MEDIUM

Heap-based buffer overflow in the xioscan_readline function in xio-readline.c in socat 1.4.0.0 through 1.7.2.0 and 2.0.0-b1 through 2.0.0-b4 allows local users to execute arbitrary code via the READLINE address.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-119,

Products Affected

Vendor Product Version
dest-unreach socat 1.4.0.2
dest-unreach socat 1.4.0.0
dest-unreach socat 1.4.0.3
dest-unreach socat 1.4.0.1
dest-unreach socat 1.7.1.3
dest-unreach socat 1.7.1.2
dest-unreach socat 1.7.0.1
dest-unreach socat 1.7.1.1
dest-unreach socat 1.4.2.0
dest-unreach socat 1.4.3.1
dest-unreach socat 1.6.0.0
dest-unreach socat 1.7.0.0
dest-unreach socat 1.7.2.0
dest-unreach socat 1.5.0.0
dest-unreach socat 2.0.0
dest-unreach socat 1.7.1.0
dest-unreach socat 1.6.0.1
dest-unreach socat 1.4.1.0
CVE-2013-3571 LOW

socat 1.2.0.0 before 1.7.2.2 and 2.0.0-b1 before 2.0.0-b6, when used for a listen type address and the fork option is enabled, allows remote attackers to cause a denial of service (file descriptor consumption) via multiple request that are refused based on the (1) sourceport, (2) lowport, (3) range, or (4) tcpwrap restrictions.

CVSS 2.0

Severity: LOW

Problem Type: NVD-CWE-noinfo,

Products Affected

Vendor Product Version
dest-unreach socat 1.4.0.2
dest-unreach socat 1.4.0.0
dest-unreach socat 1.2.0.0
dest-unreach socat 1.4.3.0
dest-unreach socat 1.7.1.3
dest-unreach socat 1.3.0.1
dest-unreach socat 1.7.1.1
dest-unreach socat 1.7.0.0
dest-unreach socat 1.5.0.0
dest-unreach socat 1.3.1.0
dest-unreach socat 1.6.0.1
dest-unreach socat 1.3.2.2
dest-unreach socat 1.4.1.0
dest-unreach socat 1.3.0.0
dest-unreach socat 1.4.0.3
dest-unreach socat 1.4.0.1
dest-unreach socat 1.7.1.2
dest-unreach socat 1.7.0.1
dest-unreach socat 1.4.2.0
dest-unreach socat 1.4.3.1
dest-unreach socat 1.6.0.0
dest-unreach socat 1.7.2.0
dest-unreach socat 2.0.0
dest-unreach socat 1.3.2.0
dest-unreach socat 1.7.1.0
dest-unreach socat 1.7.2.1
dest-unreach socat 1.3.2.1
CVE-2014-0019 LOW

Stack-based buffer overflow in socat 1.3.0.0 through 1.7.2.2 and 2.0.0-b1 through 2.0.0-b6 allows local users to cause a denial of service (segmentation fault) via a long server name in the PROXY-CONNECT address in the command line.

CVSS 2.0

Severity: LOW

Problem Type: CWE-119,

Products Affected

Vendor Product Version
dest-unreach socat 1.4.0.2
fedoraproject fedora 19
dest-unreach socat 1.4.0.0
dest-unreach socat 1.4.3.0
dest-unreach socat 1.7.1.3
dest-unreach socat 1.3.0.1
dest-unreach socat 1.7.1.1
dest-unreach socat 1.7.0.0
dest-unreach socat 1.5.0.0
dest-unreach socat 1.3.1.0
dest-unreach socat 1.6.0.1
dest-unreach socat 1.3.2.2
dest-unreach socat 1.4.1.0
dest-unreach socat 1.3.0.0
dest-unreach socat 1.7.2.2
dest-unreach socat 1.4.0.3
dest-unreach socat 1.4.0.1
dest-unreach socat 1.7.1.2
dest-unreach socat 1.7.0.1
dest-unreach socat 1.4.2.0
dest-unreach socat 1.4.3.1
dest-unreach socat 1.6.0.0
dest-unreach socat 1.7.2.0
opensuse opensuse 13.1
dest-unreach socat 2.0.0
dest-unreach socat 1.3.2.0
dest-unreach socat 1.7.1.0
dest-unreach socat 1.7.2.1
dest-unreach socat 1.3.2.1
fedoraproject fedora 20
CVE-2015-1379 MEDIUM

The signal handler implementations in socat before 1.7.3.0 and 2.0.0-b8 allow remote attackers to cause a denial of service (process freeze or crash).

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-20,

Products Affected

Vendor Product Version
dest-unreach socat *
dest-unreach socat 2.0.0-b8
CVE-2016-2217 MEDIUM

The OpenSSL address implementation in Socat 1.7.3.0 and 2.0.0-b8 does not use a prime number for the DH, which makes it easier for remote attackers to obtain the shared secret.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-320,

Products Affected

Vendor Product Version
dest-unreach socat 2.0.0
dest-unreach socat 1.7.3.0