CVE-2016-2217: Dest-Unreach Socat

Medium severity, CVSS 5.3. EPSS: 2.5% chance of exploitation in the next 30 days.

The OpenSSL address implementation in Socat 1.7.3.0 and 2.0.0-b8 does not use a prime number for the DH, which makes it easier for remote attackers to obtain the shared secret.

Affected products

• Dest-Unreach Socat: version 1.7.3.0 only; version 2.0.0 only

Published 2017-01-30. Last modified 2026-06-17.