Summary
The socat utility establishes bi-directional byte streams and transfers data between them. The utility can establish streams between a large set of channels, such as files, pipes, devices, and sockets.
Security Fix(es):
* socat: arbitrary file overwrite via predictable /tmp directory (CVE-2024-54661)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | socat | 0:1.7.4.1-2.el8_10 |
Vulnerabilities 1
-
Critical 9.8
readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file.
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2330297