CVE-2014-0019: Buffer Overflow
Stack-based buffer overflow in socat 1.3.0.0 through 1.7.2.2 and 2.0.0-b1 through 2.0.0-b6 allows local users to cause a denial of service (segmentation fault) via a long server name in the PROXY-CONNECT address in the command line.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0019?
CVE-2014-0019 has a medium severity rating due to its potential to cause denial of service through segmentation faults.
How do I fix CVE-2014-0019?
To fix CVE-2014-0019, update socat to versions 2.0.0-b7 or later, or apply vendor patches available for earlier versions.
Which versions of socat are affected by CVE-2014-0019?
CVE-2014-0019 affects socat versions from 1.3.0.0 through 1.7.2.2 as well as certain 2.0.0-Beta versions.
What could happen if CVE-2014-0019 is exploited?
If exploited, CVE-2014-0019 can lead to a denial of service condition by causing the application to crash.
Who should be concerned about CVE-2014-0019?
Users and administrators running affected versions of socat should be concerned and take immediate action to mitigate the vulnerability.