[Secure-testing-team] Bug#736993: socat: CVE-2014-0019: PROXY-CONNECT address overflow

Salvatore Bonaccorso carnil at debian.org
Wed Jan 29 05:37:24 UTC 2014


Package: socat
Severity: important
Tags: security upstream fixed-upstream

Hi,

the following vulnerability was published for socat.

CVE-2014-0019[0,1]:
PROXY-CONNECT address overflow

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0019
    http://security-tracker.debian.org/tracker/CVE-2014-0019
[1] http://www.dest-unreach.org/socat/contrib/socat-secadv5.txt

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore



More information about the Secure-testing-team mailing list