Screen

screen

Vendor: Gnu • 9 CVEs

CVEs (9)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-24626 1Gnu 1Screen Jun 17, 2026 Apr 8, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of servi...Show more socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.Show less
CVE-2021-26937 3Debian FedoraprojectGnu 3Debian Linux FedoraScreen Jun 17, 2026 Feb 9, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service (invalid write access and application crash) or possibly have unspecified other impact via a crafted UTF-8 character sequence.
CVE-2020-9366 1Gnu 1Screen Jun 17, 2026 Feb 24, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A buffer overflow was found in the way GNU Screen before 4.8.0 treated the special escape OSC 49. Specially crafted output, or a special program, could corrupt memory and crash Screen or possibly have unspecified other i...Show more A buffer overflow was found in the way GNU Screen before 4.8.0 treated the special escape OSC 49. Specially crafted output, or a special program, could corrupt memory and crash Screen or possibly have unspecified other impact.Show less
CVE-2017-5618 1Gnu 1Screen May 13, 2026 Mar 20, 2017 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions.
CVE-2009-1214 1Gnu 1Screen Apr 23, 2026 Apr 1, 2009 N/A· v4 N/A· v3 4.9 MEDIUM· v2 GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with world-readable permissions, which might allow local users to obtain sensitive session information.
CVE-2007-3048 1Gnu 1Screen Apr 23, 2026 Jun 5, 2007 N/A· v4 N/A· v3 7.2 HIGH· v2 GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at the password prompt. NOTE: multiple third parties report inability to reproduce this issue
CVE-2006-4573 1Gnu 1Screen Apr 23, 2026 Oct 24, 2006 N/A· v4 N/A· v3 2.6 LOW· v2 Multiple unspecified vulnerabilities in the "utf8 combining characters handling" (utf8_handle_comb function in encoding.c) in screen before 4.0.3 allows user-assisted attackers to cause a denial of service (crash or hang...Show more Multiple unspecified vulnerabilities in the "utf8 combining characters handling" (utf8_handle_comb function in encoding.c) in screen before 4.0.3 allows user-assisted attackers to cause a denial of service (crash or hang) via certain UTF8 sequences.Show less
CVE-2003-0972 1Gnu 1Screen Apr 16, 2026 Dec 15, 2003 N/A· v4 N/A· v3 10.0 HIGH· v2 Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to execute arbitrary code via a large number of ";" (semicolon) characters in escape sequences, which leads...Show more Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to execute arbitrary code via a large number of ";" (semicolon) characters in escape sequences, which leads to a buffer overflow.Show less
CVE-2002-1602 1Gnu 1Screen Apr 16, 2026 Apr 23, 2002 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Buffer overflow in the Braille module for GNU screen 3.9.11, when HAVE_BRAILLE is defined, allows local users to execute arbitrary code.