FreeBSD : socat -- FD leak (6d87c2e9-c64d-11e2-9c22-50465d9ff992)

low Nessus Plugin ID 66631

Synopsis

The remote FreeBSD host is missing a security-related update.

Description

Gerhard Rieger reports :

Under certain circumstances an FD leak occurs and can be misused for denial of service attacks against socat running in server mode.

Solution

Update the affected package.

See Also

https://seclists.org/oss-sec/2013/q2/411

http://www.nessus.org/u?a875b1f5

Plugin Details

Severity: Low

ID: 66631

File Name: freebsd_pkg_6d87c2e9c64d11e29c2250465d9ff992.nasl

Version: 1.8

Type: local

Published: 5/28/2013

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.4

CVSS v2

Risk Factor: Low

Base Score: 2.6

Vector: CVSS2#AV:N/AC:H/Au:N/C:N/I:N/A:P

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:socat, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 5/26/2013

Vulnerability Publication Date: 5/26/2013

Reference Information

CVE: CVE-2013-3571