CVE-2013-3571

Severity: low (CVSS 2.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-05-08 · updated 2026-06-16

Description

socat 1.2.0.0 before 1.7.2.2 and 2.0.0-b1 before 2.0.0-b6, when used for a listen type address and the fork option is enabled, allows remote attackers to cause a denial of service (file descriptor consumption) via multiple request that are refused based on the (1) sourceport, (2) lowport, (3) range, or (4) tcpwrap restrictions.

Affected products

socat: 1.2.0.0, 1.3.0.0, 1.3.0.1, 1.3.1.0, 1.3.2.0, 1.3.2.1 (+25)

References

http://www.dest-unreach.org/socat/contrib/socat-secadv4.html
http://www.mandriva.com/security/advisories?name=MDVSA-2013:169
http://www.openwall.com/lists/oss-security/2013/05/26/1
http://www.dest-unreach.org/socat/contrib/socat-secadv4.html
http://www.mandriva.com/security/advisories?name=MDVSA-2013:169
http://www.openwall.com/lists/oss-security/2013/05/26/1

Get alerted when CVE-2013-3571 or the next vulnerability affects your stack