CVE-2010-2799

Published Sep 14, 2010

Last updated 14 years ago

Overview

Description: Stack-based buffer overflow in the nestlex function in nestlex.c in Socat 1.5.0.0 through 1.7.1.2 and 2.0.0-b1 through 2.0.0-b3, when bidirectional data relay is enabled, allows context-dependent attackers to execute arbitrary code via long command-line arguments.
Source: secalert@redhat.com
NVD status: Analyzed

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 6.8
Impact score: 6.4
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-119

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:dest-unreach:socat:1.5.0.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "43189B21-C2E3-4066-82A1-456344B10131"
          },
          {
            "criteria": "cpe:2.3:a:dest-unreach:socat:1.6.0.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "15DA6703-CECF-4456-B8F6-18888629C122"
          },
          {
            "criteria": "cpe:2.3:a:dest-unreach:socat:1.6.0.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6320B213-6E09-4A64-9C44-3565A6006C74"
          },
          {
            "criteria": "cpe:2.3:a:dest-unreach:socat:1.7.0.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4C577A55-72B0-4F75-B7A3-558DBF2B7BFD"
          },
          {
            "criteria": "cpe:2.3:a:dest-unreach:socat:1.7.0.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "34FFD979-165A-4465-8CCD-BA6CCEDC0016"
          },
          {
            "criteria": "cpe:2.3:a:dest-unreach:socat:1.7.1.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B7B050A1-ECDE-47E8-8B7D-6AFD3923BA49"
          },
          {
            "criteria": "cpe:2.3:a:dest-unreach:socat:1.7.1.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D82983A5-0BBF-4131-AF82-1036FAFC0ABF"
          },
          {
            "criteria": "cpe:2.3:a:dest-unreach:socat:2.0.0:b1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7BE19927-5110-4C8D-8E3E-C075CA61023B"
          },
          {
            "criteria": "cpe:2.3:a:dest-unreach:socat:2.0.0:b2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9F7C7910-5259-40D9-848D-402017952540"
          },
          {
            "criteria": "cpe:2.3:a:dest-unreach:socat:2.0.0:b3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3E50A8D8-00A8-4578-85ED-C3A11A9CA955"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References