socat 1.2.0.0 before 1.7.2.2 and 2.0.0-b1 before 2.0.0-b6, when used for a listen type address and the fork option is enabled, allows remote attackers to cause a denial of service (file descriptor consumption) via multiple request that are refused based on the (1) sourceport, (2) lowport, (3) range, or (4) tcpwrap restrictions.

CVE-2010-2799 Stack-based buffer overflow in the nestlex function in nestlex.c in Socat 1.5.0.0 through 1.7.1.2 and 2.0.0-b1 through 2.0.0-b3, when bidirectional data relay is enabled, allows context-dependent attackers to execute arbitrary code via long command-line arguments.

CVE-2012-0219 Heap-based buffer overflow in the xioscan_readline function in xio-readline.c in socat 1.4.0.0 through 1.7.2.0 and 2.0.0-b1 through 2.0.0-b4 allows local users to execute arbitrary code via the READLINE address.

CVE-2013-3571 socat 1.2.0.0 before 1.7.2.2 and 2.0.0-b1 before 2.0.0-b6, when used for a listen type address and the fork option is enabled, allows remote attackers to cause a denial of service (file descriptor consumption) via multiple request that are refused based on the (1) sourceport, (2) lowport, (3) range, or (4) tcpwrap restrictions.

Fix for CVE-2013-3571: Denial of service due to file descriptor leak

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix for CVE-2013-3571: Denial of service due to file descriptor

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A vulnerability has been discovered and corrected in socat :

Under certain circumstances an FD leak occurs and can be misused for denial of service attacks against socat running in server mode (CVE-2013-3571).

The updated packages have been upgraded to the latest version (1.7.2.2) which is not vulnerable to this issue.

Gerhard Rieger reports :

Under certain circumstances an FD leak occurs and can be misused for denial of service attacks against socat running in server mode.

ID	Name	Product	Family	Severity
78159	F5 Networks BIG-IP : Socat vulnerabilities (K14919)	Nessus	F5 Networks Local Security Checks	medium
69760	Amazon Linux AMI : socat (ALAS-2013-202)	Nessus	Amazon Linux Local Security Checks	low
67362	Fedora 17 : socat-1.7.2.2-1.fc17 (2013-9505)	Nessus	Fedora Local Security Checks	low
67361	Fedora 18 : socat-1.7.2.2-1.fc18 (2013-9504)	Nessus	Fedora Local Security Checks	low
67359	Fedora 19 : socat-1.7.2.2-1.fc19 (2013-9457)	Nessus	Fedora Local Security Checks	low
66689	Mandriva Linux Security Advisory : socat (MDVSA-2013:170)	Nessus	Mandriva Local Security Checks	low
66631	FreeBSD : socat -- FD leak (6d87c2e9-c64d-11e2-9c22-50465d9ff992)	Nessus	FreeBSD Local Security Checks	low

Detections

Analytics

CVE-2013-3571

high

Tenable Plugins

medium

low

low

low

low

low

low