Read the docs
TI-2024-36634 Aliases CVE-2024-54661GHSA-x9w4-r3mh-39fw

readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file.

Priority MEDIUM 50CWE-61Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 4 fixed, 2 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat.

Summary

readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00795 56th percentileScored 2026-11-07
Fix Partial socat (dest-unreach): 1.8.0.2Red Hat: 4 advisoriesRed Hat: 4 fixed, 2 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
dest-unreachsocat1.6.0.0 to before 1.8.0.2; 2.0.0-b1 – 2.0.0-b91.8.0.2Patch availableCNA
  • socat Vendordest-unreach Affected 1.6.0.0 to before 1.8.0.2; 2.0.0-b1 – 2.0.0-b9 Fixed in 1.8.0.2 Patch available CNA

CPE names CISA-ADP · 1

CPEVersionsRoleVendor
cpe:2.3:a:dest-unreach:socat:*:*:*:*:*:*:*:*——dest-unreach
  • cpe:2.3:a:dest-unreach:socat:*:*:*:*:*:*:*:* Versions — — ·dest-unreach

Remediation

  • Fix · CNA socat (dest-unreach) Fixed in 1.8.0.2

Red Hat 4 advisories

  • RHSA-2025:11042 Released 2025-07-15 · Red Hat rating Moderate
    socat security update
    • Red Hat Enterprise Linux AppStream (v. 8) socat-1.7.4.1-2.el8_10
  • RHSA-2025:10646 Released 2025-07-08 · Red Hat rating Moderate
    socat security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) socat-1.7.4.1-5.el9_4.3
  • RHSA-2025:10544 Released 2025-07-08 · Red Hat rating Moderate
    socat security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) socat-1.7.4.1-5.el9_2.2
Show 1 more Red Hat advisories
  • RHSA-2025:10353 Released 2025-07-07 · Red Hat rating Moderate
    socat security update
    • Red Hat Enterprise Linux AppStream (v. 9) socat-1.7.4.1-6.el9_6.1

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 7AffectedNo fix planned: Out of support scope
Red Hat OpenShift Container Platform 4AffectedNo fix yet: Fix deferred
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2025:11042
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2025:10353
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2025:10544
Red Hat Enterprise Linux AppStream EUS (v.9.4)Fixed RHSA-2025:10646

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-54661
  2. 2026-10-03 Alias added: GHSA-x9w4-r3mh-39fw
  3. 2026-10-21 Affected versions changed · Red Hat
  4. 2026-10-22 Affected versions changed · Red Hat

References

Other 2

  • TI-2026-40502 socat 1.8.0.0 - 1.8.1.1 Heap Buffer Overflow via SOCKS5 Reply Parser CVSS 4.0CRITICAL 9.2
  • TI-2015-01256 The signal handler implementations in socat before 1.7.3.0 and 2.0.0-b8 allow remote… CVSS 3.0HIGH 7.5
  • TI-2010-02676 Stack-based buffer overflow in the nestlex function in nestlex.c in Socat 1.5.0.0 through… CVSS 2.0MEDIUM 6.8
  • TI-2016-02025 The OpenSSL address implementation in Socat 1.7.3.0 and 2.0.0-b8 does not use a prime… CVSS 3.0MEDIUM 5.3
  • TI-2012-00212 Heap-based buffer overflow in the xioscan_readline function in xio-readline.c in socat… CVSS 2.0MEDIUM 6.2
  • TI-2013-03117 socat 1.2.0.0 before 1.7.2.2 and 2.0.0-b1 before 2.0.0-b6, when used for a listen type… CVSS 2.0LOW 2.6
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences