Lucene search
RootSSV:61420HistoryFeb 12, 2014 - 12:00 a.m.
socat PROXY-CONNECT地址栈缓冲区溢出漏洞
2014-02-1200:00:00
Root
www.seebug.org
11
0.0004 Low
EPSS
Percentile
5.1%
BUGTRAQ ID: 65201
CVE(CAN) ID: CVE-2014-0019
Socat是一个基于命令行的工具，可以创建两个双向字节流并在其间传输数据。
socat 1.3.0.0-1.7.2.2、2.0.0-b1-2.0.0-b6存在栈缓冲区溢出漏洞，本地用户通过命令行内PROXY-CONNECT地址中的超长服务器名称，即可利用此漏洞在受影响应用中执行任意代码。
0
socat socat 2.0.0-b1 - 2.0.0-b6
socat socat 1.3.0.0 - 1.7.2.2
厂商补丁：
socat
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
Related
ubuntucve
ubuntucve
CVE-2014-0019
2014-02-04 00:00:00
securityvulns
securityvulns
[ MDVSA-2014:033 ] socat
2014-02-18 00:00:00
socat buffer overflow
2014-02-18 00:00:00
nessus
nessus
Fedora 20 : socat-1.7.2.3-1.fc20 (2014-1811)
2014-02-13 00:00:00
openSUSE Security Update : socat (openSUSE-2015-324)
2015-04-27 00:00:00
Amazon Linux AMI : socat (ALAS-2014-300)
2014-03-12 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: socat-1.7.2.3-1.fc20
2014-02-12 14:38:55
[SECURITY] Fedora 19 Update: socat-1.7.2.3-1.fc19
2014-02-12 14:52:39
nvd
nvd
CVE-2014-0019
2014-02-04 21:55:05
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2014-300)
2015-09-08 00:00:00
Fedora Update for socat FEDORA-2014-1795
2014-02-13 00:00:00
Fedora Update for socat FEDORA-2014-1795
2014-02-13 00:00:00
cve
cve
CVE-2014-0019
2014-02-04 21:55:05
prion
prion
Stack overflow
2014-02-04 21:55:00
amazon
amazon
Low: socat
2014-03-06 14:57:00
cvelist
cvelist
CVE-2014-0019
2014-02-04 16:00:00
mageia
mageia
Updated socat package fixes security vulnerability
2014-02-16 16:49:57
freebsd
freebsd
socat -- buffer overflow with data from command line
2014-01-24 00:00:00
debiancve
debiancve
CVE-2014-0019
2014-02-04 21:55:05