What is the CVSS score of CVE-2014-0019?

CVE-2014-0019 has a CVSS 2.0 base score of 1.9 (Low). CVSS vector: AV:L/AC:M/Au:N/C:N/I:N/A:P. EPSS exploitation probability: 0.1%.

Is there a patch available for CVE-2014-0019?

Yes, a patch is available for CVE-2014-0019. Update the affected software to the latest version immediately.

Socat CVE-2014-0019

LOW

Buffer Overflow (CWE-119)

2014-02-04 secalert@redhat.com

Buffer Overflow Denial Of Service Socat Fedora Opensuse

1.9

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

1.9 LOW

AV:L/AC:M/Au:N/C:N/I:N/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:M/Au:N/C:N/I:N/A:P

Attack Vector

Local

Attack Complexity

Confidentiality

None

Integrity

None

Availability

Lifecycle Timeline

CVE Published

Feb 04, 2014 - 21:55 cve.org

LOW 1.9

DescriptionCVE.org

Stack-based buffer overflow in socat 1.3.0.0 through 1.7.2.2 and 2.0.0-b1 through 2.0.0-b6 allows local users to cause a denial of service (segmentation fault) via a long server name in the PROXY-CONNECT address in the command line.

AnalysisAI

Technical ContextAI

This vulnerability is classified as Buffer Overflow (CWE-119), which allows attackers to corrupt memory to execute arbitrary code or crash the application. Stack-based buffer overflow in socat 1.3.0.0 through 1.7.2.2 and 2.0.0-b1 through 2.0.0-b6 allows local users to cause a denial of service (segmentation fault) via a long server name in the PROXY-CONNECT address in the command line. Affected products include: Dest-Unreach Socat, Fedoraproject Fedora, Opensuse. Version information: through 1.7.2.2.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Use memory-safe languages or bounds-checking. Enable ASLR, DEP/NX, stack canaries. Use safe string functions.