Summary
It was discovered that socat incorrectly handled the SOCKS5 proxy server
reply parser. A remote attacker could possibly use this issue to execute
arbitrary code. (CVE-2026-56123)
It was discovered that socat incorrectly handled a sample script. A local
attacker could possibly use this issue to overwrite arbitrary files. This
issue only affected Ubuntu 24.04 LTS. (CVE-2024-54661)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 24.04 LTS 24.04:LTS | socat | 1.8.0.0-4ubuntu0.1 |
| Ubuntu · 26.04 LTS 26.04:LTS | socat | 1.8.1.1-1ubuntu0.1 |
Vulnerabilities 2
-
Critical 9.8
readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file.
-
High 8.1
socat 1.8.0.0 - 1.8.1.1 Heap Buffer Overflow via SOCKS5 Reply Parser
socat versions 1.8.0.0 through 1.8.1.1 contain a heap-based buffer overflow vulnerability that allows a malicious SOCKS5 proxy server to overwrite adjacent heap memory by exploiting a sign-extension flaw in the DOMAINNAME reply parser. During connection setup…