CVE-2012-0219 Heap-based buffer overflow in the xioscan_readline function in xio-readline.c in socat 1.4.0.0 through 1.7.2.0 and 2.0.0-b1 through 2.0.0-b4 allows local users to execute arbitrary code via the READLI...
MediumCVSS 6.2
EPSS 0.46%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the xioscan_readline function in xio-readline.c in socat 1.4.0.0 through 1.7.2.0 and 2.0.0-b1 through 2.0.0-b4 allows local users to execute arbitrary code via the READLINE address.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/socat(Debian:12) | < 1.7.1.3-1.3 | 1.7.1.3-1.3 |
| debian/socat(Debian:13) | < 1.7.1.3-1.3 | 1.7.1.3-1.3 |
| debian/socat(Debian:14) | < 1.7.1.3-1.3 | 1.7.1.3-1.3 |
| dest-unreach socat | = 1.4.0.0 | No fix listed |
| dest-unreach socat | = 1.4.0.1 | No fix listed |
| dest-unreach socat | = 1.4.0.2 | No fix listed |
| dest-unreach socat | = 1.4.0.3 | No fix listed |
| dest-unreach socat | = 1.4.1.0 | No fix listed |
| dest-unreach socat | = 1.4.2.0 | No fix listed |
| dest-unreach socat | = 1.4.3.1 | No fix listed |
| dest-unreach socat | = 1.5.0.0 | No fix listed |
| dest-unreach socat | = 1.6.0.0 | No fix listed |
| dest-unreach socat | = 1.6.0.1 | No fix listed |
| dest-unreach socat | = 1.7.0.0 | No fix listed |
| dest-unreach socat | = 1.7.0.1 | No fix listed |
| dest-unreach socat | = 1.7.1.0 | No fix listed |
| dest-unreach socat | = 1.7.1.1 | No fix listed |
| dest-unreach socat | = 1.7.1.2 | No fix listed |
| dest-unreach socat | = 1.7.1.3 | No fix listed |
| dest-unreach socat | = 1.7.2.0 | No fix listed |
| dest-unreach socat | = 2.0.0-b1 | No fix listed |
| dest-unreach socat | = 2.0.0-b2 | No fix listed |
| dest-unreach socat | = 2.0.0-b3 | No fix listed |
| dest-unreach socat | = 2.0.0-b4 | No fix listed |
References
- Debian Security Tracker CVE-2012-0219 vendor-advisory
- FEDORA-2012-8274 vendor-advisory
- FEDORA-2012-8328 vendor-advisory
- 49105 third-party-advisory vendor-advisory
- 49746 third-party-advisory
- GLSA-201208-01 vendor-advisory
- www.dest-unreach.org patch vendor-advisory
- openSUSE-SU-2012:0809 vendor-advisory
- MDVSA-2013:169 vendor-advisory
- [oss-security] 20120514 socat security advisory mailing-list
- 81969 vdb-entry
- 53510 vdb-entry
- 1027064 vdb-entry
- bugs.debian.org issue-tracking