CVE-2010-2799

Socat 1.5.0.0-1.7.1.2 and 2.0.0-b1-2.0.0-b3 - Stack-based Buffer Overflow in nestlex Function

Title source: llm

Description

Stack-based buffer overflow in the nestlex function in nestlex.c in Socat 1.5.0.0 through 1.7.1.2 and 2.0.0-b1 through 2.0.0-b3, when bidirectional data relay is enabled, allows context-dependent attackers to execute arbitrary code via long command-line arguments.

References (7)

Core 7

Core References

Patch

https://github.com/msmania/poodim/commit/6340d5d2c81e55e61522c4b40a6cdd5c39738cc6

Issue Tracking x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=620426

Patch x_refsource_confirm

http://www.dest-unreach.org/socat/download/socat-1.7.1.3.patch

Vendor Advisory x_refsource_confirm

http://www.dest-unreach.org/socat/contrib/socat-secadv2.html

Issue Tracking x_refsource_confirm

http://bugs.gentoo.org/show_bug.cgi?id=330785

Issue Tracking x_refsource_confirm

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=591443

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2010/dsa-2090

Scores

EPSS 0.0275

EPSS Percentile 84.5%

Details

CWE

CWE-119

Status published

Products (8)

dest-unreach/socat 1.5.0.0

dest-unreach/socat 1.6.0.0

dest-unreach/socat 1.6.0.1

dest-unreach/socat 1.7.0.0

dest-unreach/socat 1.7.0.1

dest-unreach/socat 1.7.1.0

dest-unreach/socat 1.7.1.1

dest-unreach/socat 2.0.0 b1 (3 CPE variants)

Published Sep 14, 2010

Tracked Since Feb 18, 2026