PT-2012-2410 · Socat+1 · Socat+1

Johan Thillemann · Published 2012-06-21 · Updated 2014-05-10 · CVE-2012-0219

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Medium

Base vector

AV:L/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions socat versions 1.4.0.0 through 1.7.2.0 socat versions 2.0.0-b1 through 2.0.0-b4

Description A heap-based buffer overflow issue exists in the xioscan readline function, located in the xio-readline.c file. This allows local users to execute arbitrary code via the READLINE address.

Recommendations For socat versions 1.4.0.0 through 1.7.2.0, update to a version outside of this range to resolve the issue. For socat versions 2.0.0-b1 through 2.0.0-b4, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting access to the xioscan readline function in the xio-readline.c file until a patch is available.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2012-0219

Affected Products

Suse

Socat

References · 16

• https://osv.dev/vulnerability/CVE-2012-0219 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2013:169 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-0219 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-0219 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081619.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-0219 · Vendor Advisory
• http://dest-unreach.org/socat/contrib/socat-secadv3.html · Vendor Advisory
• http://secunia.com/advisories/49105 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081882.html · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201208-01.xml · Vendor Advisory
• http://lwn.net/Articles/504742 · Vendor Advisory
• http://secunia.com/advisories/49746 · Note
• http://openwall.com/lists/oss-security/2012/05/14/2 · Note
• http://osvdb.org/81969 · Note
• http://securitytracker.com/id?1027064 · Note