Lucene search

[email protected]CVE-2012-0219

HistoryJun 21, 2012 - 3:55 p.m.

CVE-2012-0219

2012-06-2115:55:11

CWE-119

[email protected]

web.nvd.nist.gov

cve-2012-0219

heap-based buffer overflow

xioscan_readline

socat

arbitrary code execution

nvd

6.2 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Heap-based buffer overflow in the xioscan_readline function in xio-readline.c in socat 1.4.0.0 through 1.7.2.0 and 2.0.0-b1 through 2.0.0-b4 allows local users to execute arbitrary code via the READLINE address.

Affected configurations

NVD

Node

dest-unreachsocatMatch1.4.0.0

dest-unreachsocatMatch1.4.0.1

dest-unreachsocatMatch1.4.0.2

dest-unreachsocatMatch1.4.0.3

dest-unreachsocatMatch1.4.1.0

dest-unreachsocatMatch1.4.2.0

dest-unreachsocatMatch1.4.3.1

dest-unreachsocatMatch1.5.0.0

dest-unreachsocatMatch1.6.0.0

dest-unreachsocatMatch1.6.0.1

dest-unreachsocatMatch1.7.0.0

dest-unreachsocatMatch1.7.0.1

dest-unreachsocatMatch1.7.1.0

dest-unreachsocatMatch1.7.1.1

dest-unreachsocatMatch1.7.1.2

dest-unreachsocatMatch1.7.1.3

dest-unreachsocatMatch1.7.2.0

Node

dest-unreachsocatMatch2.0.0b1

dest-unreachsocatMatch2.0.0b2

dest-unreachsocatMatch2.0.0b3

dest-unreachsocatMatch2.0.0b4

CPENameOperatorVersion
dest-unreach:socatdest-unreach socateq1.4.0.0
dest-unreach:socatdest-unreach socateq1.4.0.1
dest-unreach:socatdest-unreach socateq1.4.0.2
dest-unreach:socatdest-unreach socateq1.4.0.3
dest-unreach:socatdest-unreach socateq1.4.1.0
dest-unreach:socatdest-unreach socateq1.4.2.0
dest-unreach:socatdest-unreach socateq1.4.3.1
dest-unreach:socatdest-unreach socateq1.5.0.0
dest-unreach:socatdest-unreach socateq1.6.0.0
dest-unreach:socatdest-unreach socateq1.6.0.1

CPE	Name	Operator	Version
dest-unreach:socat	dest-unreach socat	eq	1.4.0.0
dest-unreach:socat	dest-unreach socat	eq	1.4.0.1
dest-unreach:socat	dest-unreach socat	eq	1.4.0.2
dest-unreach:socat	dest-unreach socat	eq	1.4.0.3
dest-unreach:socat	dest-unreach socat	eq	1.4.1.0
dest-unreach:socat	dest-unreach socat	eq	1.4.2.0
dest-unreach:socat	dest-unreach socat	eq	1.4.3.1
dest-unreach:socat	dest-unreach socat	eq	1.5.0.0
dest-unreach:socat	dest-unreach socat	eq	1.6.0.0
dest-unreach:socat	dest-unreach socat	eq	1.6.0.1