Vulnerability-Lookup

SUSE-SU-2016:0343-1

Vulnerability from csaf_suse - Published: 2016-02-05 09:11 - Updated: 2026-09-20 12:10

Summary

Security update for socat

Severity

Moderate

Notes

Title of the patch: Security update for socat

Description of the patch: This update for socat fixes the following issues: - CVE-2013-3571: Fix a file descriptor leak that could have been misused for a denial of service attack against socat running in server mode (bsc#821985) - CVE-2014-0019: PROXY-CONNECT address was vulnerable to a stack buffer overflow (bsc#860991) - Fix a stack overflow in the parser that could have been leveraged to execute arbitrary code (bsc#964844)

Patchnames: sledsp4-socat-12384,slessp4-socat-12384

CVE-2013-3571

Affected products

Recommended 12 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:socat-0:1.7.0.0-1.18.2.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 11 SP4:socat-0:1.7.0.0-1.18.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP4:socat-0:1.7.0.0-1.18.2.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP4:socat-0:1.7.0.0-1.18.2.ia64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP4:socat-0:1.7.0.0-1.18.2.ppc64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP4:socat-0:1.7.0.0-1.18.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 11 SP4:socat-0:1.7.0.0-1.18.2.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:socat-0:1.7.0.0-1.18.2.i586	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:socat-0:1.7.0.0-1.18.2.ia64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:socat-0:1.7.0.0-1.18.2.ppc64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:socat-0:1.7.0.0-1.18.2.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:socat-0:1.7.0.0-1.18.2.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2014-0019

Affected products

Recommended 12 products, the same list as for CVE-2013-3571

Threats

Impact low

References

14 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-security-upd…	self
https://bugzilla.suse.com/821985	self
https://bugzilla.suse.com/860991	self
https://bugzilla.suse.com/964844	self
https://www.suse.com/security/cve/CVE-2013-3571/	self
https://www.suse.com/security/cve/CVE-2014-0019/	self
https://www.suse.com/security/cve/CVE-2013-3571	external
https://bugzilla.suse.com/821985	external
https://www.suse.com/security/cve/CVE-2014-0019	external
https://bugzilla.suse.com/860991	external
https://bugzilla.suse.com/927161	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for socat",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nThis update for socat fixes the following issues:\n\n- CVE-2013-3571: Fix a file descriptor leak that could have been misused for a denial of service attack against socat running in server mode (bsc#821985)\n- CVE-2014-0019: PROXY-CONNECT address was vulnerable to a stack buffer overflow (bsc#860991)\n- Fix a stack overflow in the parser that could have been leveraged to execute arbitrary code (bsc#964844)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "sledsp4-socat-12384,slessp4-socat-12384",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_0343-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2016:0343-1",
        "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160343-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2016:0343-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2016-February/001850.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 821985",
        "url": "https://bugzilla.suse.com/821985"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 860991",
        "url": "https://bugzilla.suse.com/860991"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 964844",
        "url": "https://bugzilla.suse.com/964844"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2013-3571 page",
        "url": "https://www.suse.com/security/cve/CVE-2013-3571/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-0019 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-0019/"
      }
    ],
    "title": "Security update for socat",
    "tracking": {
      "current_release_date": "2026-09-20T12:10:20Z",
      "generator": {
        "date": "2016-02-05T09:11:34Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2016:0343-1",
      "initial_release_date": "2016-02-05T09:11:34Z",
      "revision_history": [
        {
          "date": "2016-02-05T09:11:34Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T12:10:20Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "socat-0:1.7.0.0-1.18.2.i586",
                "product": {
                  "name": "socat-0:1.7.0.0-1.18.2.i586",
                  "product_id": "socat-0:1.7.0.0-1.18.2.i586",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:dest-unreach:socat:1.7.0.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/socat@1.7.0.0-1.18.2?arch=i586\u0026upstream=socat-0:1.7.0.0-1.18.2.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "socat-0:1.7.0.0-1.18.2.ia64",
                "product": {
                  "name": "socat-0:1.7.0.0-1.18.2.ia64",
                  "product_id": "socat-0:1.7.0.0-1.18.2.ia64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:dest-unreach:socat:1.7.0.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/socat@1.7.0.0-1.18.2?arch=ia64\u0026upstream=socat-0:1.7.0.0-1.18.2.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "socat-0:1.7.0.0-1.18.2.ppc64",
                "product": {
                  "name": "socat-0:1.7.0.0-1.18.2.ppc64",
                  "product_id": "socat-0:1.7.0.0-1.18.2.ppc64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:dest-unreach:socat:1.7.0.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/socat@1.7.0.0-1.18.2?arch=ppc64\u0026upstream=socat-0:1.7.0.0-1.18.2.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "socat-0:1.7.0.0-1.18.2.s390x",
                "product": {
                  "name": "socat-0:1.7.0.0-1.18.2.s390x",
                  "product_id": "socat-0:1.7.0.0-1.18.2.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:dest-unreach:socat:1.7.0.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/socat@1.7.0.0-1.18.2?arch=s390x\u0026upstream=socat-0:1.7.0.0-1.18.2.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "socat-0:1.7.0.0-1.18.2.x86_64",
                "product": {
                  "name": "socat-0:1.7.0.0-1.18.2.x86_64",
                  "product_id": "socat-0:1.7.0.0-1.18.2.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:dest-unreach:socat:1.7.0.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/socat@1.7.0.0-1.18.2?arch=x86_64\u0026upstream=socat-0:1.7.0.0-1.18.2.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 11 SP4",
                  "product_id": "SUSE Linux Enterprise Desktop 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse_sled:11:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP4",
                  "product_id": "SUSE Linux Enterprise Server 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse_sles:11:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:11:sp4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "socat-0:1.7.0.0-1.18.2.i586 as component of SUSE Linux Enterprise Desktop 11 SP4",
          "product_id": "SUSE Linux Enterprise Desktop 11 SP4:socat-0:1.7.0.0-1.18.2.i586"
        },
        "product_reference": "socat-0:1.7.0.0-1.18.2.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "socat-0:1.7.0.0-1.18.2.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP4",
          "product_id": "SUSE Linux Enterprise Desktop 11 SP4:socat-0:1.7.0.0-1.18.2.x86_64"
        },
        "product_reference": "socat-0:1.7.0.0-1.18.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "socat-0:1.7.0.0-1.18.2.i586 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:socat-0:1.7.0.0-1.18.2.i586"
        },
        "product_reference": "socat-0:1.7.0.0-1.18.2.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "socat-0:1.7.0.0-1.18.2.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:socat-0:1.7.0.0-1.18.2.ia64"
        },
        "product_reference": "socat-0:1.7.0.0-1.18.2.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "socat-0:1.7.0.0-1.18.2.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:socat-0:1.7.0.0-1.18.2.ppc64"
        },
        "product_reference": "socat-0:1.7.0.0-1.18.2.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "socat-0:1.7.0.0-1.18.2.s390x as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:socat-0:1.7.0.0-1.18.2.s390x"
        },
        "product_reference": "socat-0:1.7.0.0-1.18.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "socat-0:1.7.0.0-1.18.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
          "product_id": "SUSE Linux Enterprise Server 11 SP4:socat-0:1.7.0.0-1.18.2.x86_64"
        },
        "product_reference": "socat-0:1.7.0.0-1.18.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "socat-0:1.7.0.0-1.18.2.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:socat-0:1.7.0.0-1.18.2.i586"
        },
        "product_reference": "socat-0:1.7.0.0-1.18.2.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "socat-0:1.7.0.0-1.18.2.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:socat-0:1.7.0.0-1.18.2.ia64"
        },
        "product_reference": "socat-0:1.7.0.0-1.18.2.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "socat-0:1.7.0.0-1.18.2.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:socat-0:1.7.0.0-1.18.2.ppc64"
        },
        "product_reference": "socat-0:1.7.0.0-1.18.2.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "socat-0:1.7.0.0-1.18.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:socat-0:1.7.0.0-1.18.2.s390x"
        },
        "product_reference": "socat-0:1.7.0.0-1.18.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "socat-0:1.7.0.0-1.18.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:socat-0:1.7.0.0-1.18.2.x86_64"
        },
        "product_reference": "socat-0:1.7.0.0-1.18.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2013-3571",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2013-3571"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "socat 1.2.0.0 before 1.7.2.2 and 2.0.0-b1 before 2.0.0-b6, when used for a listen type address and the fork option is enabled, allows remote attackers to cause a denial of service (file descriptor consumption) via multiple request that are refused based on the (1) sourceport, (2) lowport, (3) range, or (4) tcpwrap restrictions.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP4:socat-0:1.7.0.0-1.18.2.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:socat-0:1.7.0.0-1.18.2.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:socat-0:1.7.0.0-1.18.2.i586",
          "SUSE Linux Enterprise Server 11 SP4:socat-0:1.7.0.0-1.18.2.ia64",
          "SUSE Linux Enterprise Server 11 SP4:socat-0:1.7.0.0-1.18.2.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:socat-0:1.7.0.0-1.18.2.s390x",
          "SUSE Linux Enterprise Server 11 SP4:socat-0:1.7.0.0-1.18.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:socat-0:1.7.0.0-1.18.2.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:socat-0:1.7.0.0-1.18.2.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:socat-0:1.7.0.0-1.18.2.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:socat-0:1.7.0.0-1.18.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:socat-0:1.7.0.0-1.18.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2013-3571",
          "url": "https://www.suse.com/security/cve/CVE-2013-3571"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 821985 for CVE-2013-3571",
          "url": "https://bugzilla.suse.com/821985"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP4:socat-0:1.7.0.0-1.18.2.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:socat-0:1.7.0.0-1.18.2.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:socat-0:1.7.0.0-1.18.2.i586",
            "SUSE Linux Enterprise Server 11 SP4:socat-0:1.7.0.0-1.18.2.ia64",
            "SUSE Linux Enterprise Server 11 SP4:socat-0:1.7.0.0-1.18.2.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:socat-0:1.7.0.0-1.18.2.s390x",
            "SUSE Linux Enterprise Server 11 SP4:socat-0:1.7.0.0-1.18.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:socat-0:1.7.0.0-1.18.2.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:socat-0:1.7.0.0-1.18.2.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:socat-0:1.7.0.0-1.18.2.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:socat-0:1.7.0.0-1.18.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:socat-0:1.7.0.0-1.18.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-02-05T09:11:34Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2013-3571"
    },
    {
      "cve": "CVE-2014-0019",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-0019"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Stack-based buffer overflow in socat 1.3.0.0 through 1.7.2.2 and 2.0.0-b1 through 2.0.0-b6 allows local users to cause a denial of service (segmentation fault) via a long server name in the PROXY-CONNECT address in the command line.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 11 SP4:socat-0:1.7.0.0-1.18.2.i586",
          "SUSE Linux Enterprise Desktop 11 SP4:socat-0:1.7.0.0-1.18.2.x86_64",
          "SUSE Linux Enterprise Server 11 SP4:socat-0:1.7.0.0-1.18.2.i586",
          "SUSE Linux Enterprise Server 11 SP4:socat-0:1.7.0.0-1.18.2.ia64",
          "SUSE Linux Enterprise Server 11 SP4:socat-0:1.7.0.0-1.18.2.ppc64",
          "SUSE Linux Enterprise Server 11 SP4:socat-0:1.7.0.0-1.18.2.s390x",
          "SUSE Linux Enterprise Server 11 SP4:socat-0:1.7.0.0-1.18.2.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:socat-0:1.7.0.0-1.18.2.i586",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:socat-0:1.7.0.0-1.18.2.ia64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:socat-0:1.7.0.0-1.18.2.ppc64",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:socat-0:1.7.0.0-1.18.2.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 11 SP4:socat-0:1.7.0.0-1.18.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-0019",
          "url": "https://www.suse.com/security/cve/CVE-2014-0019"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 860991 for CVE-2014-0019",
          "url": "https://bugzilla.suse.com/860991"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 927161 for CVE-2014-0019",
          "url": "https://bugzilla.suse.com/927161"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 11 SP4:socat-0:1.7.0.0-1.18.2.i586",
            "SUSE Linux Enterprise Desktop 11 SP4:socat-0:1.7.0.0-1.18.2.x86_64",
            "SUSE Linux Enterprise Server 11 SP4:socat-0:1.7.0.0-1.18.2.i586",
            "SUSE Linux Enterprise Server 11 SP4:socat-0:1.7.0.0-1.18.2.ia64",
            "SUSE Linux Enterprise Server 11 SP4:socat-0:1.7.0.0-1.18.2.ppc64",
            "SUSE Linux Enterprise Server 11 SP4:socat-0:1.7.0.0-1.18.2.s390x",
            "SUSE Linux Enterprise Server 11 SP4:socat-0:1.7.0.0-1.18.2.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:socat-0:1.7.0.0-1.18.2.i586",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:socat-0:1.7.0.0-1.18.2.ia64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:socat-0:1.7.0.0-1.18.2.ppc64",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:socat-0:1.7.0.0-1.18.2.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 11 SP4:socat-0:1.7.0.0-1.18.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-02-05T09:11:34Z",
          "details": "low"
        }
      ],
      "title": "CVE-2014-0019"
    }
  ]
}

CVE-2013-3571 (GCVE-0-2013-3571)

Vulnerability from cvelistv5 – Published: 2014-05-08 14:00 – Updated: 2024-08-06 16:14

Summary

socat 1.2.0.0 before 1.7.2.2 and 2.0.0-b1 before 2.0.0-b6, when used for a listen type address and the fork option is enabled, allows remote attackers to cause a denial of service (file descriptor consumption) via multiple request that are refused based on the (1) sourceport, (2) lowport, (3) range, or (4) tcpwrap restrictions.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

3 references

URL	Tags
http://www.dest-unreach.org/socat/contrib/socat-s…	x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.openwall.com/lists/oss-security/2013/05/26/1	mailing-listx_refsource_MLIST

Date Public

2013-05-26 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T16:14:56.235Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.dest-unreach.org/socat/contrib/socat-secadv4.html"
          },
          {
            "name": "MDVSA-2013:169",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:169"
          },
          {
            "name": "[oss-security] 20130526 socat security advisory 4 - CVE-2013-3571",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2013/05/26/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-05-26T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "socat 1.2.0.0 before 1.7.2.2 and 2.0.0-b1 before 2.0.0-b6, when used for a listen type address and the fork option is enabled, allows remote attackers to cause a denial of service (file descriptor consumption) via multiple request that are refused based on the (1) sourceport, (2) lowport, (3) range, or (4) tcpwrap restrictions."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2014-05-08T12:57:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.dest-unreach.org/socat/contrib/socat-secadv4.html"
        },
        {
          "name": "MDVSA-2013:169",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:169"
        },
        {
          "name": "[oss-security] 20130526 socat security advisory 4 - CVE-2013-3571",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2013/05/26/1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2013-3571",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "socat 1.2.0.0 before 1.7.2.2 and 2.0.0-b1 before 2.0.0-b6, when used for a listen type address and the fork option is enabled, allows remote attackers to cause a denial of service (file descriptor consumption) via multiple request that are refused based on the (1) sourceport, (2) lowport, (3) range, or (4) tcpwrap restrictions."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.dest-unreach.org/socat/contrib/socat-secadv4.html",
              "refsource": "CONFIRM",
              "url": "http://www.dest-unreach.org/socat/contrib/socat-secadv4.html"
            },
            {
              "name": "MDVSA-2013:169",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:169"
            },
            {
              "name": "[oss-security] 20130526 socat security advisory 4 - CVE-2013-3571",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2013/05/26/1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2013-3571",
    "datePublished": "2014-05-08T14:00:00.000Z",
    "dateReserved": "2013-05-21T00:00:00.000Z",
    "dateUpdated": "2024-08-06T16:14:56.235Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-0019 (GCVE-0-2014-0019)

Vulnerability from cvelistv5 – Published: 2014-02-04 16:00 – Updated: 2024-08-06 08:58

Summary

Stack-based buffer overflow in socat 1.3.0.0 through 1.7.2.2 and 2.0.0-b1 through 2.0.0-b6 allows local users to cause a denial of service (segmentation fault) via a long server name in the PROXY-CONNECT address in the command line.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

9 references

URL	Tags
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.securityfocus.com/bid/65201	vdb-entryx_refsource_BID
http://osvdb.org/102612	vdb-entryx_refsource_OSVDB
http://seclists.org/oss-sec/2014/q1/159	mailing-listx_refsource_MLIST
http://www.dest-unreach.org/socat	x_refsource_CONFIRM
http://www.dest-unreach.org/socat/contrib/socat-s…	x_refsource_MISC
http://lists.opensuse.org/opensuse-updates/2015-0…	vendor-advisoryx_refsource_SUSE
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA

Date Public

2014-01-28 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T08:58:26.559Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "FEDORA-2014-1795",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128229.html"
          },
          {
            "name": "MDVSA-2014:033",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2014:033"
          },
          {
            "name": "65201",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/65201"
          },
          {
            "name": "102612",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/102612"
          },
          {
            "name": "[oss-security] 20140128 Socat security advisory 5 - PROXY-CONNECT address overflow",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://seclists.org/oss-sec/2014/q1/159"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.dest-unreach.org/socat"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.dest-unreach.org/socat/contrib/socat-secadv5.txt"
          },
          {
            "name": "openSUSE-SU-2015:0760",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00043.html"
          },
          {
            "name": "FEDORA-2014-1811",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128190.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-01-28T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow in socat 1.3.0.0 through 1.7.2.2 and 2.0.0-b1 through 2.0.0-b6 allows local users to cause a denial of service (segmentation fault) via a long server name in the PROXY-CONNECT address in the command line."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2015-04-30T14:57:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "FEDORA-2014-1795",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128229.html"
        },
        {
          "name": "MDVSA-2014:033",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2014:033"
        },
        {
          "name": "65201",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/65201"
        },
        {
          "name": "102612",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/102612"
        },
        {
          "name": "[oss-security] 20140128 Socat security advisory 5 - PROXY-CONNECT address overflow",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://seclists.org/oss-sec/2014/q1/159"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.dest-unreach.org/socat"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.dest-unreach.org/socat/contrib/socat-secadv5.txt"
        },
        {
          "name": "openSUSE-SU-2015:0760",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00043.html"
        },
        {
          "name": "FEDORA-2014-1811",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128190.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2014-0019",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Stack-based buffer overflow in socat 1.3.0.0 through 1.7.2.2 and 2.0.0-b1 through 2.0.0-b6 allows local users to cause a denial of service (segmentation fault) via a long server name in the PROXY-CONNECT address in the command line."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "FEDORA-2014-1795",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128229.html"
            },
            {
              "name": "MDVSA-2014:033",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2014:033"
            },
            {
              "name": "65201",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/65201"
            },
            {
              "name": "102612",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/102612"
            },
            {
              "name": "[oss-security] 20140128 Socat security advisory 5 - PROXY-CONNECT address overflow",
              "refsource": "MLIST",
              "url": "http://seclists.org/oss-sec/2014/q1/159"
            },
            {
              "name": "http://www.dest-unreach.org/socat",
              "refsource": "CONFIRM",
              "url": "http://www.dest-unreach.org/socat"
            },
            {
              "name": "http://www.dest-unreach.org/socat/contrib/socat-secadv5.txt",
              "refsource": "MISC",
              "url": "http://www.dest-unreach.org/socat/contrib/socat-secadv5.txt"
            },
            {
              "name": "openSUSE-SU-2015:0760",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2015-04/msg00043.html"
            },
            {
              "name": "FEDORA-2014-1811",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128190.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-0019",
    "datePublished": "2014-02-04T16:00:00.000Z",
    "dateReserved": "2013-12-03T00:00:00.000Z",
    "dateUpdated": "2024-08-06T08:58:26.559Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

SUSE-SU-2016:0343-1

CVE-2013-3571 (GCVE-0-2013-3571)

CVE-2014-0019 (GCVE-0-2014-0019)

Tags

Sightings

Nomenclature

Related by attack behaviour