CVE-2017-5618

Mô tả

Tham khảo

• git.savannah.gnu.org/cgit/screen.git/patch · Patch
• git.savannah.gnu.org/cgit/screen.git/tree/src/ChangeLog · Release Notes
• savannah.gnu.org/bugs · Third Party Advisory
• openwall.com/lists/oss-security/2017/01/29/3 · Exploit
• securityfocus.com/bid/95873 · Third Party Advisory
• lists.gnu.org/archive/html/screen-devel/2017-01/msg00025.html · Exploit

Lỗ hổng khác của screen

• CVE-2023-24626TRUNG BÌNH 6.5socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows loca…
• CVE-2021-26937NGHIÊM TRỌNG 9.8encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service (invalid write access and application crash) or …
• CVE-2020-9366NGHIÊM TRỌNG 9.8A buffer overflow was found in the way GNU Screen before 4.8.0 treated the special escape OSC 49. Specially crafted output, or a special pro…
• CVE-2009-1214TRUNG BÌNH 4.9GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with world-readable permissions, which might allow local users to obtain se…
• CVE-2007-3048CAO 7.2GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at the password prompt. NOTE: multiple third parties report …