CVE-2012-0219: Buffer Overflow
Published Jun 21, 2012
·Updated
Heap-based buffer overflow in the xioscanreadline function in xio-readline.c in socat 1.4.0.0 through 1.7.2.0 and 2.0.0-b1 through 2.0.0-b4 allows local users to execute arbitrary code via the READLINE address.
Affected Software
21 affected components
dest-unreach Socat=1.4.0.0
dest-unreach Socat=1.4.0.1
dest-unreach Socat=1.4.0.2
dest-unreach Socat=1.4.0.3
dest-unreach Socat=1.4.1.0
dest-unreach Socat=1.4.2.0
dest-unreach Socat=1.4.3.1
dest-unreach Socat=1.5.0.0
dest-unreach Socat=1.6.0.0
dest-unreach Socat=1.6.0.1
dest-unreach Socat=1.7.0.0
dest-unreach Socat=1.7.0.1
dest-unreach Socat=1.7.1.0
dest-unreach Socat=1.7.1.1
dest-unreach Socat=1.7.1.2
dest-unreach Socat=1.7.1.3
dest-unreach Socat=1.7.2.0
dest-unreach Socat=2.0.0-b1
dest-unreach Socat=2.0.0-b2
dest-unreach Socat=2.0.0-b3
dest-unreach Socat=2.0.0-b4
Remediation
Patch Available
Event History
Jun 21, 2012
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-0219?
CVE-2012-0219 has a critical severity rating due to its potential to allow local users to execute arbitrary code.
2
How do I fix CVE-2012-0219?
To fix CVE-2012-0219, upgrade to a patched version of socat that is not vulnerable to the heap-based buffer overflow.
3
Which socat versions are affected by CVE-2012-0219?
CVE-2012-0219 affects socat versions from 1.4.0.0 to 1.7.2.0 and all 2.0.0-beta versions.
4
Who can exploit CVE-2012-0219?
CVE-2012-0219 can be exploited by local users who have access to the vulnerable version of socat.
5
What component of socat is vulnerable in CVE-2012-0219?
The vulnerability in CVE-2012-0219 resides in the xioscan_readline function of xio-readline.c.