Lucene search
+L

378 matches found

OSV
OSV
added 2026/07/23 5:45 p.m.8 views

MGASA-2026-0290 Updated socat package fixes a security vulnerability

The updated package fixes a security vulnerability: Heap Buffer Overflow via SOCKS5 Reply Parser. CVE-2026-56123...

9.8CVSS5.3AI score0.00308EPSS
SaveExploits0References4
Mageia
Mageia
added 2026/07/23 5:45 p.m.8 views

Updated socat package fixes a security vulnerability

The updated package fixes a security vulnerability: Heap Buffer Overflow via SOCKS5 Reply Parser. CVE-2026-56123...

9.8CVSS5.3AI score0.00308EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/09 12:53 p.m.5 views

OESA-2026-2943 socat security update

Socat is a relay for bidirectional data transfer between two independent data channels. Each of these data channels may be a file, pipe, device serial line etc. or a pseudo terminal, a socket UNIX, IP4, IP6 - raw, UDP, TCP, an SSL socket, proxy CONNECT connection, a file descriptor stdin etc., th...

9.8CVSS6.2AI score0.00308EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/09 12:53 p.m.5 views

OESA-2026-2942 socat security update

Socat is a relay for bidirectional data transfer between two independent data channels. Each of these data channels may be a file, pipe, device serial line etc. or a pseudo terminal, a socket UNIX, IP4, IP6 - raw, UDP, TCP, an SSL socket, proxy CONNECT connection, a file descriptor stdin etc., th...

9.8CVSS6.2AI score0.00308EPSS
SaveExploits0References2
Ubuntu
Ubuntu
added 2026/07/06 12:37 p.m.11 views

USN-8511-1: socat vulnerabilities

It was discovered that socat incorrectly handled the SOCKS5 proxy server reply parser. A remote attacker could possibly use this issue to execute arbitrary code. CVE-2026-56123 It was discovered that socat incorrectly handled a sample script. A local attacker could possibly use this issue to...

9.8CVSS6.9AI score0.008EPSS
SaveExploits0
OSV
OSV
added 2026/07/03 9:7 a.m.7 views

ROOT-OS-DEBIAN-13-CVE-2026-56123 CVE-2026-56123 in rootio-socat - Patched by Root

Root has patched CVE-2026-56123 in the rootio-socat package for Root:Debian:13. Multiple fixed versions available...

9.8CVSS5.9AI score0.00308EPSS
SaveExploits0
OSV
OSV
added 2026/06/29 12:0 a.m.6 views

OPENSUSE-SU-2026:11151-1 socat-1.8.1.3-1.1 on GA media

These are all security issues fixed in the socat-1.8.1.3-1.1 package on the GA media of openSUSE Tumbleweed...

9.8CVSS5.8AI score0.00308EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/06/28 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-56123

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - socat versions 1.8.0.0 through 1.8.1.1 contain a heap-based buffer overflow vulnerability that allows a malicious SOCKS5 proxy server to overwrite adjacent heap...

9.8CVSS6.2AI score0.00308EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/06/27 1:52 a.m.11 views

SUSE CVE-2026-56123

socat versions 1.8.0.0 through 1.8.1.1 contain a heap-based buffer overflow vulnerability that allows a malicious SOCKS5 proxy server to overwrite adjacent heap memory by exploiting a sign-extension flaw in the DOMAINNAME reply parser. During connection setup, the domain name length byte is read...

8.1CVSS6AI score0.00308EPSS
SaveExploits0References3
OSV
OSV
added 2026/06/25 5:17 p.m.9 views

ALPINE-CVE-2026-56123

socat versions 1.8.0.0 through 1.8.1.1 contain a heap-based buffer overflow vulnerability that allows a malicious SOCKS5 proxy server to overwrite adjacent heap memory by exploiting a sign-extension flaw in the DOMAINNAME reply parser. During connection setup, the domain name length byte is read...

9.8CVSS6AI score0.00308EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/25 5:17 p.m.18 views

CVE-2026-56123

socat versions 1.8.0.0 through 1.8.1.1 contain a heap-based buffer overflow vulnerability that allows a malicious SOCKS5 proxy server to overwrite adjacent heap memory by exploiting a sign-extension flaw in the DOMAINNAME reply parser. During connection setup, the domain name length byte is read...

9.8CVSS0.00308EPSS
SaveExploits0References2
OSV
OSV
added 2026/06/25 5:17 p.m.7 views

DEBIAN-CVE-2026-56123

socat versions 1.8.0.0 through 1.8.1.1 contain a heap-based buffer overflow vulnerability that allows a malicious SOCKS5 proxy server to overwrite adjacent heap memory by exploiting a sign-extension flaw in the DOMAINNAME reply parser. During connection setup, the domain name length byte is read...

9.8CVSS6AI score0.00308EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/06/25 5:17 p.m.7 views

CVE-2026-56123

socat versions 1.8.0.0 through 1.8.1.1 contain a heap-based buffer overflow vulnerability that allows a malicious SOCKS5 proxy server to overwrite adjacent heap memory by exploiting a sign-extension flaw in the DOMAINNAME reply parser. During connection setup, the domain name length byte is read...

9.8CVSS6.2AI score0.00308EPSS
SaveExploits0References2
OSV
OSV
added 2026/06/25 5:17 p.m.6 views

UBUNTU-CVE-2026-56123

socat versions 1.8.0.0 through 1.8.1.1 contain a heap-based buffer overflow vulnerability that allows a malicious SOCKS5 proxy server to overwrite adjacent heap memory by exploiting a sign-extension flaw in the DOMAINNAME reply parser. During connection setup, the domain name length byte is read...

9.8CVSS6AI score0.00308EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/06/25 3:43 p.m.8 views

CVE-2026-56123

socat versions 1.8.0.0 through 1.8.1.1 contain a heap-based buffer overflow vulnerability that allows a malicious SOCKS5 proxy server to overwrite adjacent heap memory by exploiting a sign-extension flaw in the DOMAINNAME reply parser. During connection setup, the domain name length byte is read...

9.2CVSS6.2AI score0.00308EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2026/06/25 3:43 p.m.12 views

CVE-2026-56123

socat versions 1.8.0.0 through 1.8.1.1 contain a heap-based buffer overflow vulnerability that allows a malicious SOCKS5 proxy server to overwrite adjacent heap memory by exploiting a sign-extension flaw in the DOMAINNAME reply parser. During connection setup, the domain name length byte is read...

9.8CVSS6AI score0.00308EPSS
SaveExploits0
EUVD
EUVD
added 2026/06/25 3:43 p.m.11 views

EUVD-2026-39455

socat versions 1.8.0.0 through 1.8.1.1 contain a heap-based buffer overflow vulnerability that allows a malicious SOCKS5 proxy server to overwrite adjacent heap memory by exploiting a sign-extension flaw in the DOMAINNAME reply parser. During connection setup, the domain name length byte is read...

9.2CVSS6.2AI score0.00308EPSS
SaveExploits0References2
CVE
CVE
added 2026/06/25 3:43 p.m.43 views

CVE-2026-56123

CVE-2026-56123 affects socat versions 1.8.0.0 through 1.8.1.1. A signed-char sign-extension bug in the DOMAINNAME reply parser during SOCKS5 handshake allows a negative bytes_to_read value to be implicitly converted to size_t, causing an unbounded heap write into a 262-byte reply buffer. This res...

9.8CVSS6.2AI score0.00308EPSS
SaveExploits0References2Affected Software1
AlpineLinux
AlpineLinux
added 2026/06/25 3:43 p.m.13 views

CVE-2026-56123

socat versions 1.8.0.0 through 1.8.1.1 contain a heap-based buffer overflow vulnerability that allows a malicious SOCKS5 proxy server to overwrite adjacent heap memory by exploiting a sign-extension flaw in the DOMAINNAME reply parser. During connection setup, the domain name length byte is read...

9.8CVSS6.2AI score0.00308EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/06/25 3:43 p.m.43 views

CVE-2026-56123 socat 1.8.0.0 - 1.8.1.1 Heap Buffer Overflow via SOCKS5 Reply Parser

socat versions 1.8.0.0 through 1.8.1.1 contain a heap-based buffer overflow vulnerability that allows a malicious SOCKS5 proxy server to overwrite adjacent heap memory by exploiting a sign-extension flaw in the DOMAINNAME reply parser. During connection setup, the domain name length byte is read...

9.2CVSS0.00308EPSS
SaveExploits0References2
Rows per page
Query Builder