{"id":"CVE-2016-2217","aliases":["DEBIAN-CVE-2016-2217","EUVD-2016-3301","GHSA-x8h2-j222-xxr3","MGASA-2016-0053","UBUNTU-CVE-2016-2217"],"status":"published","title":"The OpenSSL address implementation in Socat 1.7.3.0 and 2.0.0-b8 does not use a prime number for...","description":"The OpenSSL address implementation in Socat 1.7.3.0 and 2.0.0-b8 does not use a prime number for the DH, which makes it easier for remote attackers to obtain the shared secret.","severity":{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.02529,"percentile":0.84998,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-320"],"published":"2016-02-05T17:26:09Z","modified":"2026-09-22T07:00:31Z","fixes":[{"ecosystem":"Debian:12","package":"socat","fixed_in":["1.7.3.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"socat","fixed_in":["1.7.3.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"socat","fixed_in":["1.7.3.1-1"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"socat","fixed_in":["2.0.0-0.b9.1.mga5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.3.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.3.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.3.1-1"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-0.b9.1.mga5"}]}]}],"products":[{"vendor":"dest-unreach","product":"socat"}],"references":[{"url":"https://security.gentoo.org/glsa/201612-23","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://www.dest-unreach.org/socat/contrib/socat-secadv7.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"http://www.openwall.com/lists/oss-security/2016/02/04/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/02/01/4","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Patch","Third Party Advisory","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2217"},{"url":"https://github.com/advisories/GHSA-x8h2-j222-xxr3"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-2217","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2016-0053.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=17661","tags":["report"]},{"url":"http://openwall.com/lists/oss-security/2016/02/01/4","tags":["web"]},{"url":"http://openwall.com/lists/oss-security/2016/02/01/5","tags":["web"]},{"url":"http://openwall.com/lists/oss-security/2016/02/04/1","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2016-2217","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2217","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-2217","description":"The OpenSSL address implementation in Socat 1.7.3.0 and 2.0.0-b8 does not use a prime number for the DH, which makes it easier for remote attackers to obtain the shared secret.","status":"published","published":"2017-01-30T22:00:00Z","modified":"2024-08-05T23:24:48.475Z","updated_at":"2026-11-02T14:33:33.07583Z"}],"euvd":[{"id":"EUVD-2016-3301","description":"The OpenSSL address implementation in Socat 1.7.3.0 and 2.0.0-b8 does not use a prime number for the DH, which makes it easier for remote attackers to obtain the shared secret.","status":"published","published":"2017-01-30T22:00:00Z","modified":"2024-08-05T23:24:48Z","updated_at":"2026-11-03T02:22:54.125931Z"}],"ghsa":[{"id":"GHSA-x8h2-j222-xxr3","title":"The OpenSSL address implementation in Socat 1.7.3.0 and 2.0.0-b8 does not use a prime number for...","description":"The OpenSSL address implementation in Socat 1.7.3.0 and 2.0.0-b8 does not use a prime number for the DH, which makes it easier for remote attackers to obtain the shared secret.","status":"published","published":"2022-05-17T02:37:54Z","modified":"2023-01-27T05:05:53Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T14:42:47.147954Z"}],"nvd":[{"id":"CVE-2016-2217","description":"The OpenSSL address implementation in Socat 1.7.3.0 and 2.0.0-b8 does not use a prime number for the DH, which makes it easier for remote attackers to obtain the shared secret.","status":"published","published":"2017-01-30T22:59:00.31Z","modified":"2026-06-17T00:43:41.46Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-320"],"updated_at":"2026-11-02T14:03:35.029632Z"}],"osv":[{"id":"CVE-2016-2217","description":"The OpenSSL address implementation in Socat 1.7.3.0 and 2.0.0-b8 does not use a prime number for the DH, which makes it easier for remote attackers to obtain the shared secret.","status":"published","published":"2017-01-30T22:59:00.31Z","modified":"2026-04-16T06:25:45.040665178Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:02.114472Z"},{"id":"DEBIAN-CVE-2016-2217","description":"The OpenSSL address implementation in Socat 1.7.3.0 and 2.0.0-b8 does not use a prime number for the DH, which makes it easier for remote attackers to obtain the shared secret.","status":"published","published":"2017-01-30T22:59:00.31Z","modified":"2026-09-22T07:00:31.648679033Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:27.627285Z"},{"id":"UBUNTU-CVE-2016-2217","description":"The OpenSSL address implementation in Socat 1.7.3.0 and 2.0.0-b8 does not use a prime number for the DH, which makes it easier for remote attackers to obtain the shared secret.","status":"withdrawn","published":"2017-01-30T22:59:00Z","modified":"2025-07-16T08:12:06.59129Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:11.872222Z"},{"id":"MGASA-2016-0053","title":"Updated socat packages fix security vulnerability","description":"In socat before 2.0.0-b9, in the OpenSSL address implementation, the hard\ncoded 1024 bit DH p parameter was not prime. It may be possible for an\neavesdropper to recover the shared secret from a key exchange\n(CVE-2016-2217).\n\nIn socat before 2.0.0-b9, a stack overflow vulnerability was found that\ncan be triggered when command line arguments are longer than 512 bytes.\nThis vulnerability can only be exploited when an attacker is able to\ninject data into socat's command line.\n","status":"published","published":"2016-02-05T17:26:09Z","modified":"2026-04-16T06:23:38.239002274Z","updated_at":"2026-11-02T15:49:39.792687Z"}]}}