| Package | Affected versions | Patched versions |
|---|---|---|
| screen | = 3.9.10= 3.9.11= 3.9.13= 3.9.15= 3.9.4= 3.9.8= 3.9.9= 4.0.1 |
Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to execute arbitrary code via a large number of ";" (semicolon) characters in escape sequences, which leads to a buffer overflow.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free