CVE-2015-1379 The signal handler implementations in socat before 1.7.3.0 and 2.0.0-b8 allow remote attackers to cause a denial of service (process freeze or crash).
HighCVSS 7.5
EPSS 3.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The signal handler implementations in socat before 1.7.3.0 and 2.0.0-b8 allow remote attackers to cause a denial of service (process freeze or crash).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/socat(Debian:12) | < 1.7.2.4-2 | 1.7.2.4-2 |
| debian/socat(Debian:13) | < 1.7.2.4-2 | 1.7.2.4-2 |
| debian/socat(Debian:14) | < 1.7.2.4-2 | 1.7.2.4-2 |
| dest-unreach socat | <= 1.7.2.4 | No fix listed |
| dest-unreach socat | = 2.0.0-b8 | No fix listed |
References
- Debian Security Tracker CVE-2015-1379 vendor-advisory
- www.dest-unreach.org patch vendor-advisory
- [oss-security] 20150127 Re: Socat security advisory 6 - Possible DoS with fork mailing-list patch third-party-advisory
- [oss-security] 20150406 Socat security advisory 6 - Possible DoS with fork (update: CVE-Id: CVE-2015-1379; fix for version 2) mailing-list patch third-party-advisory
- 72321 third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking patch third-party-advisory vdb-entry
- bugs.debian.org issue-tracking