Advisories » MGASA-2013-0159

Updated socat package fixes security vulnerability

Publication date: 06 Jun 2013
Modification date: 18 Jun 2013
Type: security
Affected Mageia releases : 2 , 3
CVE: CVE-2013-3571

Description

Under certain circumstances an FD leak occurs and can be misused for denial of
service attacks against socat running in server mode (CVE-2013-3571).
                

References

• http://www.dest-unreach.org/socat/contrib/socat-secadv4.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3571

SRPMS

3/core

• socat-2.0.0-0.b6.1.mga3

2/core

• socat-1.7.2.2-1.mga2