Summary
The socat utility establishes bi-directional byte streams and transfers data between them. The utility can establish streams between a large set of channels, such as files, pipes, devices, and sockets.
Security Fix(es):
* socat: arbitrary file overwrite via predictable /tmp directory (CVE-2024-54661)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | socat | 1.7.4.1-2.el8_10 |
Vulnerabilities 1
-
Critical 9.8
readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file.