Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-26937: A flaw was found in screen. A specially crafted sequence of combining characters could cause an out of bounds write leading to arbitrary code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. 1927062: CVE-2021-26937 screen: crash when processing combining chars
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | screen | 0:4.1.0-0.27.20120314git3c2946.amzn2 |
| Amazon Linux · 2 | screen-debuginfo | 0:4.1.0-0.27.20120314git3c2946.amzn2 |
Vulnerabilities 1
-
Unscored —
encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service (invalid write access and a…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-26937.html