Search for packages
| purl | pkg:deb/debian/screen@3.7.4-9 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-22f5-j3qf-kkbh
Aliases: CVE-2003-0972 |
Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to execute arbitrary code via a large number of ";" (semicolon) characters in escape sequences, which leads to a buffer overflow. |
Affected by 7 other vulnerabilities. |
|
VCID-2yta-5h7n-j3gg
Aliases: CVE-2009-1215 |
Race condition in GNU screen 4.0.3 allows local users to create or overwrite arbitrary files via a symlink attack on the /tmp/screen-exchange temporary file. |
Affected by 4 other vulnerabilities. |
|
VCID-52m3-cg57-ubh9
Aliases: CVE-2017-5618 |
GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions. |
Affected by 2 other vulnerabilities. |
|
VCID-c255-m7n4-4yew
Aliases: CVE-2021-26937 |
encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service (invalid write access and application crash) or possibly have unspecified other impact via a crafted UTF-8 character sequence. |
Affected by 2 other vulnerabilities. Affected by 4 other vulnerabilities. |
|
VCID-jnmp-k1c2-rkbc
Aliases: CVE-2009-1214 |
GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with world-readable permissions, which might allow local users to obtain sensitive session information. |
Affected by 4 other vulnerabilities. |
|
VCID-wr8k-aue4-2fhc
Aliases: CVE-2020-9366 |
A buffer overflow was found in the way GNU Screen before 4.8.0 treated the special escape OSC 49. Specially crafted output, or a special program, could corrupt memory and crash Screen or possibly have unspecified other impact. |
Affected by 4 other vulnerabilities. |
|
VCID-y8x8-n2ku-yuf3
Aliases: CVE-2006-4573 |
Multiple unspecified vulnerabilities in the "utf8 combining characters handling" (utf8_handle_comb function in encoding.c) in screen before 4.0.3 allows user-assisted attackers to cause a denial of service (crash or hang) via certain UTF8 sequences. |
Affected by 6 other vulnerabilities. |
|
VCID-zqvs-uzxx-1qem
Aliases: CVE-2015-6806 |
The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial of service (stack consumption) via an escape sequence with a large repeat count value. |
Affected by 4 other vulnerabilities. Affected by 4 other vulnerabilities. Affected by 2 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||