Skip to content
OpenAdvisories

Package · Alpine

screen

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

9 results · Feed

  • High 7.8
    CVE-2025-23395

    Local root exploit via `logfile_reopen()` in screen 5.0.0 with setuid-root bit set

    Screen 5.0.0 when it runs with setuid-root privileges does not drop privileges while operating on a user supplied path. This allows unprivileged users to create files in arbitrary locations with `root` ownership, the invoking user's (real) group ownership and…

    screen Alpine
  • Medium 6.0
    CVE-2025-46802

    Temporary chown() of users' TTY to mode 0666 allows PTY hijacking in screen

    For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session.

    SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP6 SUSE Linux Enterprise Server 15 SP6 SUSE Linux Enterprise High Performance Computing 15 SP6 Linux Debian Ubuntu Alpine
  • Medium 5.0
    CVE-2025-46803

    Screen creates by default world-writable PTYs

    The default mode of pseudo terminals (PTYs) allocated by Screen was changed from 0620 to 0622, thereby allowing anyone to write to any Screen PTYs in the system.

    screen Alpine
  • Low 3.3
    CVE-2025-46804

    Screen 5.0.0 and older versions allow file existence tests when installed setuid-root

    A minor information leak when running Screen with setuid-root privileges allows unprivileged users to deduce information about a path that would otherwise not be available. Affected are older Screen versions, as well as version 5.0.0.

    screen screen screen Debian Ubuntu Alpine
  • Medium 5.5
    CVE-2025-46805

    Screen has a TOCTOU race potentially allowing to send SIGHUP, SIGCONT to privileged processes when installed setuid-root

    Screen version 5.0.0 and older version 4 releases have a TOCTOU race potentially allowing to send SIGHUP, SIGCONT to privileged processes when installed setuid-root.

    screen screen screen Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2023-24626 Public exploit

    socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and …

    screen screen screen Debian Ubuntu Alpine
  • Unscored —
    CVE-2021-26937

    encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service (invalid write access and a…

    screen screen screen Debian Ubuntu Alpine
  • Unscored —
    CVE-2020-9366

    A buffer overflow was found in the way GNU Screen before 4.8.0 treated the special escape OSC 49. Specially crafted out…

    screen screen Debian Alpine
  • Unscored —
    CVE-2017-5618

    GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveragin…

    screen screen Debian Alpine