Description
Heap-based buffer overflow in the xioscan_readline function in xio-readline.c in socat 1.4.0.0 through 1.7.2.0 and 2.0.0-b1 through 2.0.0-b4 allows local users to execute arbitrary code via the READLINE address.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | socat | 1.7.1.3-1.3 | — |
| Debian 13 | socat | 1.7.1.3-1.3 | — |
| Debian 12 | socat | 1.7.1.3-1.3 | — |
References
- 49746 third-party-advisory
- 1027064 vdb-entry
- FEDORA-2012-8328 vendor-advisory
- GLSA-201208-01 vendor-advisory
- http://www.dest-unreach.org/socat/contrib/socat-secadv3.html
- FEDORA-2012-8274 vendor-advisory
- openSUSE-SU-2012:0809 vendor-advisory
- 53510 vdb-entry
- MDVSA-2013:169 vendor-advisory
- 81969 vdb-entry
- 49105 third-party-advisory
- [oss-security] 20120514 socat security advisory mailing-list