CVE-2021-26937

Mô tả

Tham khảo

• openwall.com/lists/oss-security/2021/02/09/8 · Exploit
• ftp.gnu.org/gnu/screen · Product
• lists.debian.org/debian-lts-announce/2021/02/msg00031.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNWBOIDEPOEQS5RMQVMFKHKXJCGNYWBL
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJWLXP45POUUYBJRRWPVAWNZDJTLYWVM
• lists.gnu.org/archive/html/screen-devel/2021-02/msg00000.html · Exploit
• security.gentoo.org/glsa/202105-11 · Third Party Advisory
• debian.org/security/2021/dsa-4861 · Third Party Advisory
• openwall.com/lists/oss-security/2021/02/09/3 · Exploit
• security.netapp.com/advisory/ntap-20250509-0004

Lỗ hổng khác của screen

• CVE-2023-24626TRUNG BÌNH 6.5socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows loca…
• CVE-2020-9366NGHIÊM TRỌNG 9.8A buffer overflow was found in the way GNU Screen before 4.8.0 treated the special escape OSC 49. Specially crafted output, or a special pro…
• CVE-2017-5618CAO 7.8GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking o…
• CVE-2009-1214TRUNG BÌNH 4.9GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with world-readable permissions, which might allow local users to obtain se…
• CVE-2007-3048CAO 7.2GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at the password prompt. NOTE: multiple third parties report …