{"id":"CVE-2024-54661","aliases":["ALPINE-CVE-2024-54661","ALSA-2025:10353","ALSA-2025:11042","AZL-53960","AZL-53978","BELL-CVE-2024-54661","CLSA-2026-1782140243","DEBIAN-CVE-2024-54661","EUVD-2024-52644","GHSA-x9w4-r3mh-39fw","MGASA-2024-0390","OESA-2024-2580","RHSA-2025:10353","RHSA-2025:10544","RHSA-2025:10646","RHSA-2025:11042","RLSA-2025:10353","RLSA-2025:11042","ROOT-OS-ALPINE-318-CVE-2024-54661","ROOT-OS-ALPINE-319-CVE-2024-54661","ROOT-OS-ALPINE-320-CVE-2024-54661","SUSE-SU-2024:4294-1","SUSE-SU-2024:4295-1","SUSE-SU-2024:4302-1","SUSE-SU-2024:4348-1","UBUNTU-CVE-2024-54661","USN-8511-1","openSUSE-SU-2024:14582-1"],"status":"published","title":"readline.sh in socat through 1.8.0.1 relies on the /tmp/$USER/stderr2 file.","description":"readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00795,"percentile":0.56904,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-61"],"published":"2024-12-04T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"socat","fixed_in":["1.7.4.1-6.el9_6.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"socat","fixed_in":["1.7.4.1-2.el8_10"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"socat","fixed_in":["1.7.4.4-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"socat","fixed_in":["1.7.4.3-2"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"socat","fixed_in":["1.8.0.2-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"socat","fixed_in":["1.7.4.1-5.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"socat","fixed_in":["1.8.0.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"socat","fixed_in":["1.8.0.2-1"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"socat","fixed_in":["1.8.0.2-1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"socat","fixed_in":["1.8.0.0-3.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"socat","fixed_in":["1.7.3.2-9.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"socat","fixed_in":["1.7.3.2-9.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"socat","fixed_in":["1.7.3.2-9.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"socat","fixed_in":["1.7.3.2-9.oe2203sp1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"socat","fixed_in":["0:1.7.4.1-6.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"socat-debuginfo","fixed_in":["0:1.7.4.1-6.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"socat-debugsource","fixed_in":["0:1.7.4.1-6.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"socat","fixed_in":["0:1.7.4.1-5.el9_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"socat-debuginfo","fixed_in":["0:1.7.4.1-5.el9_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"socat-debugsource","fixed_in":["0:1.7.4.1-5.el9_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"socat","fixed_in":["0:1.7.4.1-5.el9_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"socat-debuginfo","fixed_in":["0:1.7.4.1-5.el9_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"socat-debugsource","fixed_in":["0:1.7.4.1-5.el9_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"socat","fixed_in":["0:1.7.4.1-2.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"socat-debuginfo","fixed_in":["0:1.7.4.1-2.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"socat-debugsource","fixed_in":["0:1.7.4.1-2.el8_10"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"socat","fixed_in":["0:1.7.4.1-6.el9_6.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"socat","fixed_in":["0:1.7.4.1-2.el8_10"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.18","package":"rootio-socat","fixed_in":["1.7.4.4-r10071"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.19","package":"rootio-socat","fixed_in":["1.8.0.0-r00071"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.20","package":"rootio-socat","fixed_in":["1.8.0.0-r00071"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"socat","fixed_in":["1.7.2.4-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"socat","fixed_in":["1.8.0.0-150600.20.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"socat","fixed_in":["1.8.0.0-150600.20.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"socat","fixed_in":["1.8.0.0-150400.14.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"socat","fixed_in":["1.8.0.0-150400.14.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"socat","fixed_in":["1.8.0.0-150400.14.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"socat","fixed_in":["1.8.0.0-150400.14.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.5","package":"socat","fixed_in":["1.8.0.0-150400.14.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"socat","fixed_in":["1.8.0.0-150400.14.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"socat","fixed_in":["1.7.3.2-150000.6.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"socat","fixed_in":["1.8.0.0-4ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"socat","fixed_in":["1.8.0.2-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4.1-6.el9_6.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4.1-2.el8_10"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4.4-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4.3-2"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.4.4-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.0.0-r0"},{"fixed":"1.8.0.2-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4.1-5.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.7.4.4-2","1.7.4.4-2+hurd.1","1.8.0.0-1","1.8.0.0-2","1.8.0.0-3","1.8.0.0-4","1.8.0.0-4~bpo12+1","1.8.0.1-1","1.8.0.1-2","1.8.0.2-1","1.8.0.3-1","1.8.1.0-1","1.8.1.0-2","1.8.1.1-1","1.8.1.1-2","1.8.1.3-1","1.8.1.3-2","2.0.0~beta3-1","2.0.0~beta3-2","2.0.0~beta4-1","2.0.0~beta4-1.1","2.0.0~beta9-1"]},{"source":"osv","ecosystem":"Debian:13","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.2-1"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.2-1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.0-3.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.3.2-9.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.3.2-9.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.3.2-9.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.3.2-9.oe2203sp1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.4.1-6.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"socat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.4.1-6.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"socat-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.4.1-6.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.4.1-5.el9_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"socat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.4.1-5.el9_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"socat-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.4.1-5.el9_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.4.1-5.el9_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"socat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.4.1-5.el9_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"socat-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.4.1-5.el9_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.4.1-2.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"socat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.4.1-2.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"socat-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.4.1-2.el8_10"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.4.1-6.el9_6.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.4.1-2.el8_10"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.18","package":"rootio-socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4.4-r10071"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.19","package":"rootio-socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.0-r00071"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.20","package":"rootio-socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.0-r00071"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.2.4-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.0-150600.20.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.0-150600.20.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.0-150400.14.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.0-150400.14.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.0-150400.14.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.0-150400.14.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.5","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.0-150400.14.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.0-150400.14.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.3.2-150000.6.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.7.1.3-1.5ubuntu1","1.7.2.2-1","1.7.2.3-1","1.7.2.3-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.7.3.0-1","1.7.3.0-2","1.7.3.1-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.7.3.2-1","1.7.3.2-2","1.7.3.2-2build1","1.7.3.2-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.7.3.2-2ubuntu3","1.7.3.3-2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.7.4.1-3ubuntu1","1.7.4.1-3ubuntu2","1.7.4.1-3ubuntu3","1.7.4.1-3ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.0-4ubuntu0.1"}]}],"versions":["1.7.4.4-2","1.8.0.0-4","1.8.0.0-4build1","1.8.0.0-4build2","1.8.0.0-4build3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.0-4ubuntu0.1"}]}],"versions":["1.7.4.4-2","1.8.0.0-4","1.8.0.0-4build1","1.8.0.0-4build2","1.8.0.0-4build3"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1.1-1ubuntu0.1"}]}],"versions":["1.8.0.3-1build1","1.8.1.0-1","1.8.1.0-2","1.8.1.1-1"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"socat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.2-1.1"}]}]}],"products":[{"vendor":"dest-unreach","product":"socat"}],"references":[{"url":"https://repo.or.cz/socat.git/blob/6ff391324d2d3b9f6bfb58e7d16a20be43b47af7:/readline.sh#l29","tags":["web","article","report"]},{"url":"http://www.dest-unreach.org/socat/contrib/socat-secadv9.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-54661","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-x9w4-r3mh-39fw"},{"url":"https://security.alpinelinux.org/vuln/CVE-2024-54661","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10353","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-54661","tags":["report"]},{"url":"https://bugzilla.redhat.com/2330297","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-10353.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:11042","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-11042.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2024-54661","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1782140243.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-54661","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0390.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33851","tags":["report"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2024-December/019988.html","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2580","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2330297","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10353.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-54661","tags":["advisory","report"]},{"url":"https://github.com/advisories/ghsa-x9w4-r3mh-39fw","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10544","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10544.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10646","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10646.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11042.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:10353","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:11042","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20244294-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1225462","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-54661","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20244295-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20244302-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20244348-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-54661","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8511-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-56123","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XWXJAVQD3HTBZI5EGK6RRHQ3EC55XXFL/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-54661","description":"readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file.","status":"published","published":"2024-12-04T00:00:00Z","modified":"2025-01-09T16:30:38.38Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-61"],"updated_at":"2026-11-02T14:33:59.177173Z"}],"euvd":[{"id":"EUVD-2024-52644","description":"readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file.","status":"published","published":"2024-12-04T00:00:00Z","modified":"2025-01-09T16:30:38Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T00:04:22.603579Z"}],"ghsa":[{"id":"GHSA-x9w4-r3mh-39fw","title":"readline.sh in socat through 1.8.0.1 relies on the /tmp/$USER/stderr2 file.","description":"readline.sh in socat through 1.8.0.1 relies on the /tmp/$USER/stderr2 file.","status":"published","published":"2024-12-04T06:31:02Z","modified":"2025-01-07T03:31:36Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-61"],"updated_at":"2026-11-02T14:59:22.508847Z"}],"nvd":[{"id":"CVE-2024-54661","description":"readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file.","status":"published","published":"2024-12-04T05:15:07.967Z","modified":"2026-06-17T08:10:36.677Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-61"],"updated_at":"2026-11-02T14:10:38.973941Z"}],"osv":[{"id":"ALPINE-CVE-2024-54661","description":"readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file.","status":"withdrawn","published":"2024-12-04T05:15:07.967Z","modified":"2026-07-14T08:03:33.294083368Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:27:49.709457Z"},{"id":"BELL-CVE-2024-54661","status":"published","published":"2024-12-05T05:59:33.379286Z","modified":"2026-01-26T09:38:07.341923Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:20.963569Z"},{"id":"DEBIAN-CVE-2024-54661","description":"readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file.","status":"published","published":"2024-12-04T05:15:07.967Z","modified":"2026-11-02T12:03:09.321013347Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:44.429177Z"},{"id":"OESA-2024-2580","title":"socat security update","description":"Socat is a relay for bidirectional data transfer between two independent data channels. Each of these data channels may be a file, pipe, device (serial line etc. or a pseudo terminal), a socket (UNIX, IP4, IP6 - raw, UDP, TCP), an SSL socket, proxy CONNECT connection, a file descriptor (stdin etc.), the GNU line editor (readline), a program, or a combination of two of these.\r\n\r\nSecurity Fix(es):\r\n\r\nreadline.sh in socat through 1.8.0.1 relies on the /tmp/$USER/stderr2 file.(CVE-2024-54661)","status":"published","published":"2024-12-27T11:08:03Z","modified":"2026-08-18T01:17:43.864230361Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"RHSA-2025:10353","title":"Red Hat Security Advisory: socat security update","status":"published","published":"2025-07-07T10:02:45Z","modified":"2026-06-03T10:10:39Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10544","title":"Red Hat Security Advisory: socat security update","status":"published","published":"2025-07-08T10:04:17Z","modified":"2026-06-03T10:10:44Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10646","title":"Red Hat Security Advisory: socat security update","status":"published","published":"2025-07-09T10:05:10Z","modified":"2026-06-03T10:10:50Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:11042","title":"Red Hat Security Advisory: socat security update","status":"published","published":"2025-07-15T10:08:08Z","modified":"2026-06-03T10:10:58Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RLSA-2025:10353","title":"Moderate: socat security update","description":"The socat utility establishes bi-directional byte streams and transfers data between them. The utility can establish streams between a large set of channels, such as files, pipes, devices, and sockets.\n\nSecurity Fix(es):\n\n* socat: arbitrary file overwrite via predictable /tmp directory (CVE-2024-54661)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-04T00:11:30.91642Z","modified":"2025-10-07T17:39:59.941259Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"RLSA-2025:11042","title":"Moderate: socat security update","description":"The socat utility establishes bi-directional byte streams and transfers data between them. The utility can establish streams between a large set of channels, such as files, pipes, devices, and sockets.\n\nSecurity Fix(es):\n\n* socat: arbitrary file overwrite via predictable /tmp directory (CVE-2024-54661)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-07-29T13:38:41.630147Z","modified":"2025-07-29T14:33:22.005519Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"UBUNTU-CVE-2024-54661","description":"readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file.","status":"published","published":"2024-12-04T05:15:00Z","modified":"2026-07-06T20:30:42.447975098Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:55:15.331356Z"},{"id":"ALSA-2025:10353","title":"Moderate: socat security update","description":"The socat utility establishes bi-directional byte streams and transfers data between them. The utility can establish streams between a large set of channels, such as files, pipes, devices, and sockets.  \n\nSecurity Fix(es):  \n\n  * socat: arbitrary file overwrite via predictable /tmp directory (CVE-2024-54661)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-07-07T00:00:00Z","modified":"2026-10-29T11:32:26.383169086Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"ALSA-2025:11042","title":"Moderate: socat security update","description":"The socat utility establishes bi-directional byte streams and transfers data between them. The utility can establish streams between a large set of channels, such as files, pipes, devices, and sockets.  \n\nSecurity Fix(es):  \n\n  * socat: arbitrary file overwrite via predictable /tmp directory (CVE-2024-54661)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-07-15T00:00:00Z","modified":"2026-10-29T11:02:26.317803199Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"AZL-53960","title":"CVE-2024-54661 affecting package socat for versions less than 1.7.4.4-2","description":"readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file.","status":"published","published":"2024-12-04T05:15:07Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:20.828909Z"},{"id":"AZL-53978","title":"CVE-2024-54661 affecting package socat for versions less than 1.7.4.3-2","description":"readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file.","status":"published","published":"2024-12-04T05:15:07Z","modified":"2026-04-21T04:35:26.629401Z","updated_at":"2026-11-02T15:28:06.595149Z"},{"id":"CLSA-2026-1782140243","title":"socat: Fix of CVE-2024-54661","description":"- CVE-2024-54661: fix arbitrary file overwrite in readline.sh","status":"published","published":"2026-06-22T14:57:37Z","modified":"2026-10-26T09:30:21.679365282Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CVE-2024-54661","description":"readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file.","status":"published","published":"2024-12-04T05:15:07Z","modified":"2026-04-16T04:37:27.677704464Z","updated_at":"2026-11-02T15:44:44.451316Z"},{"id":"MGASA-2024-0390","title":"Updated socat packages fix security vulnerability","description":"CVE-2024-54661: Fixed arbitrary file overwrite via predictable /tmp\ndirectory in socat readline.sh\n","status":"published","published":"2024-12-17T19:42:28Z","modified":"2026-04-16T04:42:39.716247526Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:14582-1","title":"socat-1.8.0.2-1.1 on GA media","description":"These are all security issues fixed in the socat-1.8.0.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-12-13T00:00:00Z","modified":"2026-02-04T03:19:49.125562Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"ROOT-OS-ALPINE-318-CVE-2024-54661","title":"CVE-2024-54661 in rootio-socat - Patched by Root","description":"Root has patched CVE-2024-54661 in the rootio-socat package for Root:Alpine:3.18. Multiple fixed versions available.","status":"published","published":"2025-08-12T08:23:12Z","modified":"2026-02-13T03:23:57.999489Z","updated_at":"2026-11-02T15:53:28.259095Z"},{"id":"ROOT-OS-ALPINE-319-CVE-2024-54661","title":"CVE-2024-54661 in rootio-socat - Patched by Root","description":"Root has patched CVE-2024-54661 in the rootio-socat package for Root:Alpine:3.19. Multiple fixed versions available.","status":"published","published":"2025-08-12T08:23:12Z","modified":"2026-02-13T03:16:42.580249Z","updated_at":"2026-11-02T15:53:28.259095Z"},{"id":"ROOT-OS-ALPINE-320-CVE-2024-54661","title":"CVE-2024-54661 in rootio-socat - Patched by Root","description":"Root has patched CVE-2024-54661 in the rootio-socat package for Root:Alpine:3.20. Multiple fixed versions available.","status":"published","published":"2025-08-12T08:23:12Z","modified":"2026-02-13T03:17:02.822335Z","updated_at":"2026-11-02T15:53:28.259095Z"},{"id":"SUSE-SU-2024:4294-1","title":"Security update for socat","description":"This update for socat fixes the following issues:\n\n  - CVE-2024-54661: Fixed arbitrary file overwrite via predictable /tmp directory (bsc#1225462)\n\n","status":"published","published":"2024-12-11T13:06:40Z","modified":"2026-02-04T04:25:45.78002Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2024:4295-1","title":"Security update for socat","description":"This update for socat fixes the following issues:\n\n- CVE-2024-54661: Fixed arbitrary file overwrite via predictable /tmp directory in socat readline.sh (bsc#1225462)  \n","status":"published","published":"2024-12-11T14:40:58Z","modified":"2026-02-04T03:07:45.703014Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2024:4302-1","title":"Security update for socat","description":"This update for socat fixes the following issues:\n\n - CVE-2024-54661: Fixed arbitrary file overwrite via predictable /tmp directory (bsc#1225462)\n\n","status":"published","published":"2024-12-12T08:51:05Z","modified":"2026-02-04T02:20:21.912308Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2024:4348-1","title":"Security update for socat","description":"This update for socat fixes the following issues:\n\n  - CVE-2024-54661: Fixed arbitrary file overwrite via predictable /tmp directory (bsc#1225462)\n\n","status":"published","published":"2024-12-17T08:36:49Z","modified":"2026-02-04T02:41:32.806275Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"USN-8511-1","title":"socat vulnerabilities","description":"It was discovered that socat incorrectly handled the SOCKS5 proxy server\nreply parser. A remote attacker could possibly use this issue to execute\narbitrary code. (CVE-2026-56123)\n\nIt was discovered that socat incorrectly handled a sample script. A local\nattacker could possibly use this issue to overwrite arbitrary files. This\nissue only affected Ubuntu 24.04 LTS. (CVE-2024-54661)","status":"published","published":"2026-07-06T12:37:17Z","modified":"2026-07-06T20:44:29.593211784Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}