What’s Vulnerable › Vulnerabilities

CVE-2024-54661

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-12-04 · updated 2026-06-17
• Weakness: CWE-61

Description

readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file.

Affected products

• socat: through 1.8.0.1

References

• http://www.dest-unreach.org/socat/contrib/socat-secadv9.html
• https://repo.or.cz/socat.git/blob/6ff391324d2d3b9f6bfb58e7d16a20be43b47af7:/readline.sh#l29

Get alerted when CVE-2024-54661 or the next vulnerability affects your stack