socat Remote Denial of Service Vulnerability

Bugtraq ID:	72321
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2015-1379
Remote:	Yes
Local:	No
Published:	Jan 27 2015 12:00AM
Updated:	May 07 2015 05:28PM
Credit:	Peter Lobsinger
Vulnerable:	socat socat 2.0.0-b7 socat socat 2.0.0-b6 socat socat 2.0.0-b5 socat socat 2.0.0-b4 socat socat 2.0.0-b3 socat socat 2.0.0-b2 socat socat 2.0.0-b1 socat socat 1.7.2.4 socat socat 1.7.2.3 socat socat 1.7.2.2 socat socat 1.7.2.1 socat socat 1.7.2.0 socat socat 1.7.1.3 socat socat 1.7.1.2 socat socat 1.7.1.1 socat socat 1.7.1.0 socat socat 1.7.0.1 socat socat 1.7.0.0 socat socat 1.6.0.1 socat socat 1.6.0.0 socat socat 1.5.0.0 socat socat 1.3.0.0 socat socat 1.2.0.0 socat socat 1.0.0.0
Not Vulnerable:	socat socat 2.0.0-b8 socat socat 1.7.3.0

socat Remote Denial of Service Vulnerability

socat is prone to a remote denial-of-service vulnerability.

Successful exploits may allow the attacker to cause a denial-of-service condition.

socat versions 1.0.0.0 through 1.7.2.4 and 2.0.0-b1 through 2.0.0-b7 are vulnerable.

socat Remote Denial of Service Vulnerability

Attackers can use readily available tools to exploit this issue.

socat Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

socat Remote Denial of Service Vulnerability

References:

• Socat security advisory 6 - Possible DoS with fork (Peter Lobsinger)
  
• socat Home Page (socat)