CVE-2010-2799: Stack-based buffer overflow in the nestlex function in nestlex.c in Socat 1.5.0.0 through 1.7.1.2 and 2.0.0...

Security readout for executives and security teams

CVE-2010-2799 is a memory corruption flaw in Socat. In affected versions, unusually long command-line arguments can overflow stack memory when bidirectional data relay is enabled. If an attacker can influence those arguments, the stated impact is arbitrary code execution in the Socat process context. Exposure is most likely on systems with vulnerable Socat versions installed and used for bidirectional data relay. Risk is higher where scripts, wrappers, automation, or services allow untrusted users to influence Socat command-line arguments. Prioritize remediation where Socat is exposed through automation, user-controlled workflows, or operational relay services. The impact can be code execution, but exploitability depends on local deployment patterns and argument control. Mitigation focus: Inventory Socat versions across servers, containers, and appliances.; Apply vendor updates, including Debian DSA-2090 where applicable.; Use the upstream 1.7.1.3 patch when vendor packaging is unavailable..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.