{"id":"CVE-2015-1379","aliases":["DEBIAN-CVE-2015-1379","EUVD-2015-1516","GHSA-mhm8-j49g-j7wp","MGASA-2015-0144","SUSE-SU-2025:0726-1","UBUNTU-CVE-2015-1379"],"status":"published","title":"The signal handler implementations in socat before 1.7.3.0 and 2.0.0-b8 allow remote attackers to...","description":"The signal handler implementations in socat before 1.7.3.0 and 2.0.0-b8 allow remote attackers to cause a denial of service (process freeze or crash).","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0393,"percentile":0.90448,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2015-04-15T09:01:28Z","modified":"2026-09-09T07:00:26Z","fixes":[{"ecosystem":"Debian:12","package":"socat","fixed_in":["1.7.2.4-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"socat","fixed_in":["1.7.2.4-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"socat","fixed_in":["1.7.2.4-2"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"socat","fixed_in":["2.0.0-0.b8.1.mga4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"socat","fixed_in":["1.7.2.4-4.6.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"socat","fixed_in":["1.7.2.3-1ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.2.4-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.2.4-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.2.4-2"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-0.b8.1.mga4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.2.4-4.6.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.2.3-1ubuntu0.1~esm1"}]}],"versions":["1.7.1.3-1.5ubuntu1","1.7.2.2-1","1.7.2.3-1"]}],"products":[{"vendor":"dest-unreach","product":"socat"}],"references":[{"url":"http://www.dest-unreach.org/socat/","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"http://www.openwall.com/lists/oss-security/2015/04/06/4","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Patch","Third Party Advisory","advisory","article","fix"]},{"url":"http://www.securityfocus.com/bid/72321","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/01/27/19","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Patch","Third Party Advisory","advisory","article","fix"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1185711","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","VDB Entry","advisory","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-1379"},{"url":"http://www.dest-unreach.org/socat"},{"url":"https://github.com/advisories/GHSA-mhm8-j49g-j7wp"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-1379","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0144.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15131","tags":["report"]},{"url":"http://openwall.com/lists/oss-security/2015/04/06/4","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250726-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/922903","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1379","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2015-1379","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-1379","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-1379","description":"The signal handler implementations in socat before 1.7.3.0 and 2.0.0-b8 allow remote attackers to cause a denial of service (process freeze or crash).","status":"published","published":"2017-06-08T21:00:00Z","modified":"2024-08-06T04:40:18.602Z","updated_at":"2026-11-02T14:35:44.046042Z"}],"euvd":[{"id":"EUVD-2015-1516","description":"The signal handler implementations in socat before 1.7.3.0 and 2.0.0-b8 allow remote attackers to cause a denial of service (process freeze or crash).","status":"published","published":"2017-06-08T21:00:00Z","modified":"2024-08-06T04:40:18Z","updated_at":"2026-11-03T02:22:15.605684Z"}],"ghsa":[{"id":"GHSA-mhm8-j49g-j7wp","title":"The signal handler implementations in socat before 1.7.3.0 and 2.0.0-b8 allow remote attackers to...","description":"The signal handler implementations in socat before 1.7.3.0 and 2.0.0-b8 allow remote attackers to cause a denial of service (process freeze or crash).","status":"published","published":"2022-05-17T02:41:04Z","modified":"2025-04-20T03:39:46Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:01:47.903342Z"}],"nvd":[{"id":"CVE-2015-1379","description":"The signal handler implementations in socat before 1.7.3.0 and 2.0.0-b8 allow remote attackers to cause a denial of service (process freeze or crash).","status":"published","published":"2017-06-08T21:29:00.19Z","modified":"2026-06-17T00:22:18.073Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:03:17.730372Z"}],"osv":[{"id":"CVE-2015-1379","description":"The signal handler implementations in socat before 1.7.3.0 and 2.0.0-b8 allow remote attackers to cause a denial of service (process freeze or crash).","status":"published","published":"2017-06-08T21:29:00Z","modified":"2026-04-16T06:21:13.436491528Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:00.097545Z"},{"id":"DEBIAN-CVE-2015-1379","description":"The signal handler implementations in socat before 1.7.3.0 and 2.0.0-b8 allow remote attackers to cause a denial of service (process freeze or crash).","status":"published","published":"2017-06-08T21:29:00.19Z","modified":"2026-09-09T07:00:26.680651862Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:26.752992Z"},{"id":"UBUNTU-CVE-2015-1379","description":"The signal handler implementations in socat before 1.7.3.0 and 2.0.0-b8 allow remote attackers to cause a denial of service (process freeze or crash).","status":"published","published":"2017-06-08T21:29:00Z","modified":"2025-09-08T16:43:20Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:09.721803Z"},{"id":"MGASA-2015-0144","title":"Updated socat packages fix CVE-2015-1379","description":"Updated socat package fixes security vulnerability:\n\nIn socat before 2.0.0-b8, signal handler implementations are not\nasync-signal-safe and can cause crash or freeze of socat processes. Mostly\nthis issue occurs when socat is in listening mode with fork option and a\ncouple of child processes terminate at the same time (CVE-2015-1379).\n","status":"published","published":"2015-04-15T09:01:28Z","modified":"2026-04-16T06:22:57.45798158Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"SUSE-SU-2025:0726-1","title":"Security update for socat","description":"This update for socat fixes the following issues:\n\n- CVE-2015-1379: lack of async-signal-safe signal handlers can lead to crashes or freezing of socat processes\n  (bsc#922903).\n","status":"published","published":"2025-02-26T13:37:01Z","modified":"2026-02-04T04:02:02.973417Z","updated_at":"2026-11-02T15:53:58.883365Z"}]}}