CVE-2013-3571

2014-05-0814:29:08

Debian Security Bug Tracker

security-tracker.debian.org

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

0.006 Low

EPSS

Percentile

78.1%

JSON

socat 1.2.0.0 before 1.7.2.2 and 2.0.0-b1 before 2.0.0-b6, when used for a listen type address and the fork option is enabled, allows remote attackers to cause a denial of service (file descriptor consumption) via multiple request that are refused based on the (1) sourceport, (2) lowport, (3) range, or (4) tcpwrap restrictions.

OSVersionArchitecturePackageVersionFilename
Debian12allsocat< 1.7.1.3-1.5socat_1.7.1.3-1.5_all.deb
Debian11allsocat< 1.7.1.3-1.5socat_1.7.1.3-1.5_all.deb
Debian999allsocat< 1.7.1.3-1.5socat_1.7.1.3-1.5_all.deb
Debian13allsocat< 1.7.1.3-1.5socat_1.7.1.3-1.5_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	socat	< 1.7.1.3-1.5	socat_1.7.1.3-1.5_all.deb
Debian	11	all	socat	< 1.7.1.3-1.5	socat_1.7.1.3-1.5_all.deb
Debian	999	all	socat	< 1.7.1.3-1.5	socat_1.7.1.3-1.5_all.deb
Debian	13	all	socat	< 1.7.1.3-1.5	socat_1.7.1.3-1.5_all.deb