azure linux socat vulnerabilities

Latest azure linux socat CVEs

Newest publication first

1. CVE-2026-56123 socat 1.8.0.0 - 1.8.1.1 Heap Buffer Overflow via SOCKS5 Reply Parser

   Published 2026-06-25

   Critical·CVSS 9.2 EPSS 0.31%

   socat versions 1.8.0.0 through 1.8.1.1 contain a heap-based buffer overflow vulnerability that allows a malicious SOCKS5 proxy server to overwrite adjacent heap memory by exploiting a sign-extension flaw in the DOMAINNAME reply parser. During connection setup, the domain name len...

2. CVE-2024-54661 readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file.

   Published 2024-12-04

   Critical·CVSS 9.8 EPSS 0.80%

   readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.