SC
Product
Screen
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 1Low 0
Watch
Add Screen to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-26937 | 9.8 | Feb 9 | encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service (invalid write access and application crash) or possibly have unspecified other impact… Affected: through 4.8.0 |
| CVE-2020-9366 | 9.8 | Feb 24 | A buffer overflow was found in the way GNU Screen before 4.8.0 treated the special escape OSC 49 Affected: before 4.8.0 |
| CVE-2017-5618 | 7.8 | Mar 20 | GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions Affected: through 4.5.0 |
| CVE-2023-24626 | 6.5 | Apr 8 | socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP… Affected: through 4.9.0 |
| CVE-2009-1214 | – | Apr 1 | GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with world-readable permissions, which might allow local users to obtain sensitive session information Affected: 4.0.3 |
| CVE-2007-3048 | – | Jun 5 | GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at the password prompt Affected: 4.0.3 |
| CVE-2006-4573 | – | Oct 24 | Multiple unspecified vulnerabilities in the "utf8 combining characters handling" (utf8_handle_comb function in encoding.c) in screen before 4.0.3 allows user-assisted attackers to… Affected: through 4.0.2 |
| CVE-2003-0972 | – | Dec 15 | Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to execute arbitrary code via a large number of ";" (semicolon)… Affected: 3.9.4; 3.9.8; 3.9.9; 3.9.10; 3.9.11; 3.9.13; +2 more |
| CVE-2002-1602 | – | Apr 23 | Buffer overflow in the Braille module for GNU screen 3.9.11, when HAVE_BRAILLE is defined, allows local users to execute arbitrary code Affected: 3.9.4; 3.9.8; 3.9.9; 3.9.10; 3.9.11 |
Showing 9