https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 12:36:26 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-56123 <p><strong>Affected:</strong> Alpaquita:25: socat, Alpaquita:stream: socat</p> <p><strong>Affected:</strong> Alpaquita:25: socat, Alpaquita:stream: socat</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-56123 https://cve.radiocsirt.org/vuln/euvd-2026-336913 EUVD-2026-336913 https://cve.radiocsirt.org/vuln/euvd-2026-336913 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56123 <p>socat versions 1.8.0.0 through 1.8.1.1 contain a heap-based buffer overflow vulnerability that allows a malicious SOCKS5 proxy server to overwrite adjacent heap memory by exploiting a sign-extension flaw in the DOMAINNAME reply parser. During connection setup, the domain name length byte is read through a signed char field causing a negative bytes_to_read value that is implicitly converted to size_t, resulting in an unbounded heap write into the 262-byte reply buffer with attacker-controlled size and content.</p> <p>socat versions 1.8.0.0 through 1.8.1.1 contain a heap-based buffer overflow vulnerability that allows a malicious SOCKS5 proxy server to overwrite adjacent heap memory by exploiting a sign-extension flaw in the DOMAINNAME reply parser. During connection setup, the domain name length byte is read through a signed char field causing a negative bytes_to_read value that is implicitly converted to size_t, resulting in an unbounded heap write into the 262-byte reply buffer with attacker-controlled size and content.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-56123 https://cve.radiocsirt.org/vuln/ghsa-6r8c-w5mj-43hv <p>socat versions 1.8.0.0 through 1.8.1.1 contain a heap-based buffer overflow vulnerability that allows a malicious SOCKS5 proxy server to overwrite adjacent heap memory by exploiting a sign-extension flaw in the DOMAINNAME reply parser. During connection setup, the domain name length byte is read through a signed char field causing a negative bytes_to_read value that is implicitly converted to size_t, resulting in an unbounded heap write into the 262-byte reply buffer with attacker-controlled size and content.</p> <p>socat versions 1.8.0.0 through 1.8.1.1 contain a heap-based buffer overflow vulnerability that allows a malicious SOCKS5 proxy server to overwrite adjacent heap memory by exploiting a sign-extension flaw in the DOMAINNAME reply parser. During connection setup, the domain name length byte is read through a signed char field causing a negative bytes_to_read value that is implicitly converted to size_t, resulting in an unbounded heap write into the 262-byte reply buffer with attacker-controlled size and content.</p> https://cve.radiocsirt.org/vuln/ghsa-6r8c-w5mj-43hv https://cve.radiocsirt.org/vuln/msrc_cve-2026-56123 msrc_CVE-2026-56123 https://cve.radiocsirt.org/vuln/msrc_cve-2026-56123 https://cve.radiocsirt.org/vuln/oesa-2026-2942 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP3: socat</p> <p>Socat is a relay for bidirectional data transfer between two independent data channels. Each of these data channels may be a file, pipe, device (serial line etc. or a pseudo terminal), a socket (UNIX, IP4, IP6 - raw, UDP, TCP), an SSL socket, proxy CONNECT connection, a file descriptor (stdin etc.), the GNU line editor (readline), a program, or a combination of two of these. Security Fix(es):</p> <p>socat versions 1.8.0.0 through 1.8.1.1 contain a heap-based buffer overflow vulnerability that allows a malicious SOCKS5 proxy server to overwrite adjacent heap memory by exploiting a sign-extension flaw in the DOMAINNAME reply parser. During connection setup, the domain name length byte is read through a signed char field causing a negative bytes_to_read value that is implicitly converted to size_t, resulting in an unbounded heap write into the 262-byte reply buffer with attacker-controlled size and content.(CVE-2026-56123)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP3: socat</p> <p>Socat is a relay for bidirectional data transfer between two independent data channels. Each of these data channels may be a file, pipe, device (serial line etc. or a pseudo terminal), a socket (UNIX, IP4, IP6 - raw, UDP, TCP), an SSL socket, proxy CONNECT connection, a file descriptor (stdin etc.), the GNU line editor (readline), a program, or a combination of two of these. Security Fix(es):</p> <p>socat versions 1.8.0.0 through 1.8.1.1 contain a heap-based buffer overflow vulnerability that allows a malicious SOCKS5 proxy server to overwrite adjacent heap memory by exploiting a sign-extension flaw in the DOMAINNAME reply parser. During connection setup, the domain name length byte is read through a signed char field causing a negative bytes_to_read value that is implicitly converted to size_t, resulting in an unbounded heap write into the 262-byte reply buffer with attacker-controlled size and content.(CVE-2026-56123)</p> https://cve.radiocsirt.org/vuln/oesa-2026-2942 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11151-1 <p>socat-1.8.1.3-1.1 on GA media</p> <p>socat-1.8.1.3-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11151-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-56123 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: socat, Ubuntu:25.10: socat, Ubuntu:26.04:LTS: socat</p> <p>socat versions 1.8.0.0 through 1.8.1.1 contain a heap-based buffer overflow vulnerability that allows a malicious SOCKS5 proxy server to overwrite adjacent heap memory by exploiting a sign-extension flaw in the DOMAINNAME reply parser. During connection setup, the domain name length byte is read through a signed char field causing a negative bytes_to_read value that is implicitly converted to size_t, resulting in an unbounded heap write into the 262-byte reply buffer with attacker-controlled size and content.</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: socat, Ubuntu:25.10: socat, Ubuntu:26.04:LTS: socat</p> <p>socat versions 1.8.0.0 through 1.8.1.1 contain a heap-based buffer overflow vulnerability that allows a malicious SOCKS5 proxy server to overwrite adjacent heap memory by exploiting a sign-extension flaw in the DOMAINNAME reply parser. During connection setup, the domain name length byte is read through a signed char field causing a negative bytes_to_read value that is implicitly converted to size_t, resulting in an unbounded heap write into the 262-byte reply buffer with attacker-controlled size and content.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-56123