How severe is CVE-2013-3571?

CVE-2013-3571 has a CVSS 2.0 base score of 2.6, rated low severity.

Is CVE-2013-3571 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (79th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2013-3571?

CVE-2013-3571 primarily affects Dest-unreach Socat. In total, 31 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2013-3571?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2013-3571 published?

CVE-2013-3571 was published on 2014-05-08 and last updated on 2026-06-16.

CVE-2013-3571

CVE-2013-3571 is a low-severity vulnerability in Dest-unreach Socat with a CVSS 2.0 base score of 2.6. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Low (CVSS 2.0 base score 2.6)
EPSS exploit prediction: 2% (79th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Dest-unreach Socat
Published: 2014-05-08
Last modified: 2026-06-16

Description

socat 1.2.0.0 before 1.7.2.2 and 2.0.0-b1 before 2.0.0-b6, when used for a listen type address and the fork option is enabled, allows remote attackers to cause a denial of service (file descriptor consumption) via multiple request that are refused based on the (1) sourceport, (2) lowport, (3) range, or (4) tcpwrap restrictions.

Frequently asked questions

What is CVE-2013-3571?: socat 1.2.0.0 before 1.7.2.2 and 2.0.0-b1 before 2.0.0-b6, when used for a listen type address and the fork option is enabled, allows remote attackers to cause a denial of service (file descriptor consumption) via multiple request that are refused based on the (1) sourceport, (2) lowport, (3) range, or (4) tcpwrap restrictions.
How severe is CVE-2013-3571?: CVE-2013-3571 has a CVSS 2.0 base score of 2.6, rated low severity.
Is CVE-2013-3571 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (79th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2013-3571?: CVE-2013-3571 primarily affects Dest-unreach Socat. In total, 31 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2013-3571?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2013-3571 published?: CVE-2013-3571 was published on 2014-05-08 and last updated on 2026-06-16.

References

Affected products (31)

cpe:2.3:a:dest-unreach:socat:1.2.0.0:*:*:*:*:*:*:*
cpe:2.3:a:dest-unreach:socat:1.3.0.0:*:*:*:*:*:*:*
cpe:2.3:a:dest-unreach:socat:1.3.0.1:*:*:*:*:*:*:*
cpe:2.3:a:dest-unreach:socat:1.3.1.0:*:*:*:*:*:*:*
cpe:2.3:a:dest-unreach:socat:1.3.2.0:*:*:*:*:*:*:*
cpe:2.3:a:dest-unreach:socat:1.3.2.1:*:*:*:*:*:*:*
cpe:2.3:a:dest-unreach:socat:1.3.2.2:*:*:*:*:*:*:*
cpe:2.3:a:dest-unreach:socat:1.4.0.0:*:*:*:*:*:*:*
cpe:2.3:a:dest-unreach:socat:1.4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:dest-unreach:socat:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:a:dest-unreach:socat:1.4.0.3:*:*:*:*:*:*:*
cpe:2.3:a:dest-unreach:socat:1.4.1.0:*:*:*:*:*:*:*
cpe:2.3:a:dest-unreach:socat:1.4.2.0:*:*:*:*:*:*:*
cpe:2.3:a:dest-unreach:socat:1.4.3.0:*:*:*:*:*:*:*
cpe:2.3:a:dest-unreach:socat:1.4.3.1:*:*:*:*:*:*:*
cpe:2.3:a:dest-unreach:socat:1.5.0.0:*:*:*:*:*:*:*
cpe:2.3:a:dest-unreach:socat:1.6.0.0:*:*:*:*:*:*:*
cpe:2.3:a:dest-unreach:socat:1.6.0.1:*:*:*:*:*:*:*
cpe:2.3:a:dest-unreach:socat:1.7.0.0:*:*:*:*:*:*:*
cpe:2.3:a:dest-unreach:socat:1.7.0.1:*:*:*:*:*:*:*
cpe:2.3:a:dest-unreach:socat:1.7.1.0:*:*:*:*:*:*:*
cpe:2.3:a:dest-unreach:socat:1.7.1.1:*:*:*:*:*:*:*
cpe:2.3:a:dest-unreach:socat:1.7.1.2:*:*:*:*:*:*:*
cpe:2.3:a:dest-unreach:socat:1.7.1.3:*:*:*:*:*:*:*
cpe:2.3:a:dest-unreach:socat:1.7.2.0:*:*:*:*:*:*:*
cpe:2.3:a:dest-unreach:socat:1.7.2.1:*:*:*:*:*:*:*
cpe:2.3:a:dest-unreach:socat:2.0.0:b1:*:*:*:*:*:*
cpe:2.3:a:dest-unreach:socat:2.0.0:b2:*:*:*:*:*:*
cpe:2.3:a:dest-unreach:socat:2.0.0:b3:*:*:*:*:*:*
cpe:2.3:a:dest-unreach:socat:2.0.0:b4:*:*:*:*:*:*
cpe:2.3:a:dest-unreach:socat:2.0.0:b5:*:*:*:*:*:*

More vulnerabilities in Dest-unreach Socat

CVE-2026-56123 — High (CVSS 8.1): socat versions 1.8.0.0 through 1.8.1.1 contain a heap-based buffer overflow vulnerability that allows a malicious…
CVE-2015-1379 — High (CVSS 7.5): The signal handler implementations in socat before 1.7.3.0 and 2.0.0-b8 allow remote attackers to cause a denial of…
CVE-2010-2799 — Medium (CVSS 6.8): Stack-based buffer overflow in the nestlex function in nestlex.c in Socat 1.5.0.0 through 1.7.1.2 and 2.0.0-b1 through…
CVE-2012-0219 — Medium (CVSS 6.2): Heap-based buffer overflow in the xioscan_readline function in xio-readline.c in socat 1.4.0.0 through 1.7.2.0 and…
CVE-2016-2217 — Medium (CVSS 5.3): The OpenSSL address implementation in Socat 1.7.3.0 and 2.0.0-b8 does not use a prime number for the DH, which makes it…
CVE-2014-0019 — Low (CVSS 1.9): Stack-based buffer overflow in socat 1.3.0.0 through 1.7.2.2 and 2.0.0-b1 through 2.0.0-b6 allows local users to cause…

All CVEs affecting Dest-unreach Socat →