screen

12 results · Feed

• Medium 6.0
  CVE-2025-46802

  Temporary chown() of users' TTY to mode 0666 allows PTY hijacking in screen

  For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session.

  SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP6 SUSE Linux Enterprise Server 15 SP6 SUSE Linux Enterprise High Performance Computing 15 SP6 Linux Debian Ubuntu Alpine
  May 26, 2025
• Low 3.3
  CVE-2025-46804

  Screen 5.0.0 and older versions allow file existence tests when installed setuid-root

  A minor information leak when running Screen with setuid-root privileges allows unprivileged users to deduce information about a path that would otherwise not be available. Affected are older Screen versions, as well as version 5.0.0.

  screen screen screen Debian Ubuntu Alpine
  May 26, 2025
• Medium 5.5
  CVE-2025-46805

  Screen has a TOCTOU race potentially allowing to send SIGHUP, SIGCONT to privileged processes when installed setuid-root

  Screen version 5.0.0 and older version 4 releases have a TOCTOU race potentially allowing to send SIGHUP, SIGCONT to privileged processes when installed setuid-root.

  screen screen screen Debian Ubuntu Alpine
  May 26, 2025
• Medium 6.5
  CVE-2023-24626 Public exploit

  socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and …

  screen screen screen Debian Ubuntu Alpine
  Apr 8, 2023
• Unscored —
  CVE-2021-26937

  encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service (invalid write access and a…

  screen screen screen Debian Ubuntu Alpine
  Feb 9, 2021
• Unscored —
  CVE-2020-9366

  A buffer overflow was found in the way GNU Screen before 4.8.0 treated the special escape OSC 49. Specially crafted out…

  screen screen Debian Alpine
  Feb 24, 2020
• Unscored —
  CVE-2017-5618

  GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveragin…

  screen screen Debian Alpine
  Mar 20, 2017
• Unscored —
  CVE-2015-6806

  The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote …

  screen screen Debian Ubuntu
  Sep 28, 2015
• Unscored —
  CVE-2009-1214

  GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with world-readable permissions, which might allow loc…

  screen Debian
  Apr 1, 2009
• Unscored —
  CVE-2009-1215

  Race condition in GNU screen 4.0.3 allows local users to create or overwrite arbitrary files via a symlink attack on th…

  screen Debian
  Apr 1, 2009
• Unscored —
  CVE-2006-4573

  Multiple unspecified vulnerabilities in the "utf8 combining characters handling" (utf8_handle_comb function in encoding…

  screen Debian
  Oct 24, 2006
• Unscored —
  CVE-2003-0972

  Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to exec…

  screen Debian
  Dec 2, 2003