CVE catalog

CVE-2012-0219

socat: CVE-2012-0219

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
0.46% · Oct 25, 2026

Heap-based buffer overflow in the xioscan_readline function in xio-readline.c in socat 1.4.0.0 through 1.7.2.0 and 2.0.0-b1 through 2.0.0-b4 allows local users to execute arbitrary code via the READLINE address.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiansocatsid1.8.1.3-2fixed
Debiansocatforky1.8.1.3-2fixed
Debiansocattrixie1.8.0.3-1+deb13u1fixed
Debiansocatbookworm1.7.4.4-2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiansocatsourcesid1.7.1.3-1.3lowNot reported[672994]
Debiansocatsourceforky1.7.1.3-1.3lowNot reported[672994]
Debiansocatsourcetrixie1.7.1.3-1.3lowNot reported[672994]
Debiansocatsourcebookworm1.7.1.3-1.3lowNot reported[672994]

[Debian bug #672994]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [socat]Fixed
    Details (4)
    • 1.7.4.4-2 · amd64 · bookworm

      Fixed · Fixed: 1.7.1.3-1.3

      dsa · socat · debian · bookworm; dsa · socat · debian · 12

    • 1.7.4.4-2 · arm64 · bookworm

      Fixed · Fixed: 1.7.1.3-1.3

      dsa · socat · debian · bookworm; dsa · socat · debian · 12

    • 1.8.0.0-4~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1.7.1.3-1.3

      dsa · socat · debian · bookworm; dsa · socat · debian · 12

    • 1.8.0.0-4~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1.7.1.3-1.3

      dsa · socat · debian · bookworm; dsa · socat · debian · 12

[Debian 13 (Trixie)]

  • [socat]Fixed
    Details (2)
    • 1.8.0.3-1 · amd64 · trixie

      Fixed · Fixed: 1.7.1.3-1.3

      dsa · socat · debian · 13

    • 1.8.0.3-1 · arm64 · trixie

      Fixed · Fixed: 1.7.1.3-1.3

      dsa · socat · debian · 13

Observed:

References