CVE-2020-9366

概要

参考情報

• openwall.com/lists/oss-security/2020/02/25/1 · Mailing List
• lists.gnu.org/archive/html/screen-devel/2020-02/msg00007.html · Mailing List
• security.gentoo.org/glsa/202003-62 · Third Party Advisory
• openwall.com/lists/oss-security/2020/02/06/3 · Mailing List

screen のその他の脆弱性

• CVE-2023-24626中 6.5socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows loca…
• CVE-2021-26937緊急 9.8encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service (invalid write access and application crash) or …
• CVE-2017-5618高 7.8GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking o…
• CVE-2009-1214中 4.9GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with world-readable permissions, which might allow local users to obtain se…
• CVE-2007-3048高 7.2GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at the password prompt. NOTE: multiple third parties report …