CVE-2013-3571: Dest-Unreach Socat

Low severity, CVSS 2.6. EPSS: 2.1% chance of exploitation in the next 30 days.

socat 1.2.0.0 before 1.7.2.2 and 2.0.0-b1 before 2.0.0-b6, when used for a listen type address and the fork option is enabled, allows remote attackers to cause a denial of service (file descriptor consumption) via multiple request that are refused based on the (1) sourceport, (2) lowport, (3) range, or (4) tcpwrap restrictions.

Affected products

• Dest-Unreach Socat: version 1.2.0.0 only; version 1.3.0.0 only; version 1.3.0.1 only; version 1.3.1.0 only; version 1.3.2.0 only; version 1.3.2.1 only; …

Published 2014-05-08. Last modified 2026-06-16.