Low: socat

Issue Overview: readline.sh in socat through 1.8.0.1 relies on the /tmp/$USER/stderr2 file. CVE-2024-54661 Affected Packages: socat Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories. Issue...

EUVD-2024-52644

Malicious code in bioql PyPI...

socat: arbitrary file overwrite via predictable /tmp directory

A flaw was found in the readline.sh script of Socat through version 1.8.0.1. This vulnerability can allow attackers to exploit improper use of a predictable temporary file...

ROS-20250307-01

A vulnerability in the readline.sh component of the socket forwarding utility from the host machine is related to the use of a predictable temporary file name in readline.sh. the use of a predictable temporary file name in readline.sh. Exploitation of the vulnerability could allow an attacker...

Linux Distros Unpatched Vulnerability : CVE-2024-54661

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file. CVE-2024-54661 Note that Nessus relies on the presence of the package as reported by t...

DEBIAN-CVE-2024-54661

readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file...

CVE-2024-54661

readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file...

PT-2024-36396 · Socat +8 · Socat +8

Name of the Vulnerable Software and Affected Versions: socat versions prior to 1.8.0.2 Description: The issue is related to the readline.sh file in socat, which relies on the /tmp/$USER/stderr2 file. This can lead to an arbitrary file overwrite via a predictable /tmp directory. Recommendations: F...

CVE-2024-54661

readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file...

CVE-2024-54661

readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file...

CVE-2024-54661

CVE-2024-54661 affects the socat utility. The issue arises in readline.sh usage in socat before 1.8.0.2, which relies on a predictable /tmp/$USER/stderr2 file and enables arbitrary file overwrite via the /tmp directory. The CVSSv3.1 score is 9.8 (CRITICAL) with network attack vector, no user inte...