Lucene search
K

211 matches found

RedHat Linux
RedHat Linux
added 2025/07/08 3:10 p.m.3 views

socat: arbitrary file overwrite via predictable /tmp directory

A flaw was found in the readline.sh script of Socat through version 1.8.0.1. This vulnerability can allow attackers to exploit improper use of a predictable temporary file...

9.8CVSS6.8AI score0.00164EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2025/07/07 2:52 a.m.4 views

socat: arbitrary file overwrite via predictable /tmp directory

A flaw was found in the readline.sh script of Socat through version 1.8.0.1. This vulnerability can allow attackers to exploit improper use of a predictable temporary file...

9.8CVSS6.8AI score0.00164EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2014-2524

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The rltropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create or overwrite arbitrary files via a symlink attack on a...

3.3CVSS7.6AI score0.00143EPSS
Exploits0References3
Microsoft CVE
Microsoft CVE
added 2025/01/15 8:0 a.m.2 views

readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file.

...

9.8CVSS6.9AI score0.00164EPSS
Exploits0
OSV
OSV
added 2024/12/27 12:32 p.m.1 views

OESA-2024-2580 socat security update

Socat is a relay for bidirectional data transfer between two independent data channels. Each of these data channels may be a file, pipe, device serial line etc. or a pseudo terminal, a socket UNIX, IP4, IP6 - raw, UDP, TCP, an SSL socket, proxy CONNECT connection, a file descriptor stdin etc., th...

9.8CVSS7AI score0.00164EPSS
Exploits0References2
SUSE Linux
SUSE Linux
added 2024/12/11 2:41 p.m.0 views

Security update for socat

This update for socat fixes the following issues: CVE-2024-54661: Fixed arbitrary file overwrite via predictable /tmp directory in socat readline.sh bsc1225462 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

5CVSS6.1AI score0.00164EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2024/12/05 12:15 a.m.2 views

SUSE CVE-2024-54661

readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file...

5CVSS8.7AI score0.00164EPSS
Exploits0References10
OSV
OSV
added 2024/12/04 5:15 a.m.2 views

AZL-53960 CVE-2024-54661 affecting package socat for versions less than 1.7.4.4-2

readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file...

9.8CVSS7AI score0.00164EPSS
Exploits0References1
OSV
OSV
added 2024/12/04 5:15 a.m.1 views

ALPINE-CVE-2024-54661

readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file...

9.8CVSS7AI score0.00164EPSS
Exploits0References1
OSV
OSV
added 2024/12/04 5:15 a.m.1 views

AZL-53978 CVE-2024-54661 affecting package socat for versions less than 1.7.4.3-2

readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file...

9.8CVSS7AI score0.00164EPSS
Exploits0References1
OSV
OSV
added 2024/12/04 5:15 a.m.0 views

UBUNTU-CVE-2024-54661

readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file...

9.8CVSS7AI score0.00164EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/12/04 12:0 a.m.1 views

socat 安全漏洞

socat is a repeater in the socat open source for bi-directional data transfer channels between two separate data. A security vulnerability exists in socat 1.8.0.1 and earlier versions, which originates from the readline.sh dependency on the /tmp/$USER/stderr2 file...

9.8CVSS6.8AI score0.00164EPSS
Exploits0References3
Oracle linux
Oracle linux
added 2024/10/23 12:0 a.m.35 views

virt:kvm_utils1 security update

hivex 1.3.18-21 - Bounds check for block exceeding page length CVE-2021-3504 resolves: rhbz1950501 1.3.18 - Resolves: bz1810193 Upgrade components in virt:rhel module:stream for RHEL-8.3 release 1.3.18 - Resolves: bz1810193 Upgrade components in virt:rhel module:stream for RHEL-8.3 release 1.3.15...

6CVSS8.1AI score0.9427EPSS
Exploits53
Rosalinux
Rosalinux
added 2024/08/06 9:46 a.m.16 views

Advisory ROSA-SA-2024-2464

Software: util-linux 2.32.1 OS: ROSA Virtualization 2.1 packageevrstring: util-linux-2.32.1 CVE-ID: CVE-2022-0563 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: A compilation vulnerability with Readline support has been discovered in the util-linux utilities chfn and chsh. The Readline library uses the...

5.5CVSS7AI score0.00025EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.15 views

RHEL 6 : readline (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - readline: insecure temporary file use in rltropen CVE-2014-2524 Note that Nessus has not tested for this issue but...

3.3CVSS6.5AI score0.00143EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/05/30 12:0 a.m.21 views

EulerOS 2.0 SP12 : util-linux (EulerOS-SA-2024-1757)

According to the versions of the util-linux packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an 'INPUTRC'...

5.5CVSS5.9AI score0.00025EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2024/05/30 12:0 a.m.17 views

Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2024-1780)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.7AI score0.00025EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2024/05/30 12:0 a.m.14 views

Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2024-1757)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.7AI score0.00025EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/05/30 12:0 a.m.24 views

EulerOS 2.0 SP12 : util-linux (EulerOS-SA-2024-1780)

According to the versions of the util-linux packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an 'INPUTRC'...

5.5CVSS5.9AI score0.00025EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2024/04/03 12:0 a.m.10 views

Fedora: Security Advisory for ghc-isocline (FEDORA-2024-b458482d48)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.3CVSS5.9AI score0.00049EPSS
Exploits1References2
Rows per page
Query Builder