CVE-2014-0019: Dest-Unreach Socat

Low severity, CVSS 1.9. EPSS: 0.4% chance of exploitation in the next 30 days.

Stack-based buffer overflow in socat 1.3.0.0 through 1.7.2.2 and 2.0.0-b1 through 2.0.0-b6 allows local users to cause a denial of service (segmentation fault) via a long server name in the PROXY-CONNECT address in the command line.

Affected products

• Dest-Unreach Socat: version 2.0.0 only; version 1.3.0.0 only; version 1.3.0.1 only; version 1.3.1.0 only; version 1.3.2.0 only; version 1.3.2.1 only; …
• Fedoraproject Fedora: version 19 only; version 20 only
• Opensuse Opensuse: version 13.1 only

Published 2014-02-04. Last modified 2026-06-17.