VULNERABILITY INTELLIGENCE
CVE-2014-0019
CVSS score1.9 LOW
EPSS probability0.40%
CISA KEVNot currently listed
Published2014-02-04
Last modified2026-06-17
CVSS vectorAV:L/AC:M/Au:N/C:N/I:N/A:P
Description
Stack-based buffer overflow in socat 1.3.0.0 through 1.7.2.2 and 2.0.0-b1 through 2.0.0-b6 allows local users to cause a denial of service (segmentation fault) via a long server name in the PROXY-CONNECT address in the command line.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Primary references
- secalert@redhat.com — Third Party Advisory
- secalert@redhat.com — Third Party Advisory
- secalert@redhat.com — Third Party Advisory
- secalert@redhat.com — Broken Link
- secalert@redhat.com — Patch, Third Party Advisory, VDB Entry
- secalert@redhat.com — Patch
- secalert@redhat.com — Third Party Advisory
- secalert@redhat.com — Broken Link
- secalert@redhat.com — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory