CVE-2023-24626
Summary
| CVE | CVE-2023-24626 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-04-08 05:15:00 UTC |
| Updated | 2023-04-19 13:23:00 UTC |
| Description | socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process. |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| GNU screen v4.9.0 - Privilege Escalation - Linux local Exploit | MISC | www.exploit-db.com | Third Party Advisory, VDB Entry |
| git.savannah.gnu.org/cgit/screen.git/patch | CONFIRM | git.savannah.gnu.org | Mailing List, Patch |
| GNU Screen - Bugs: Exiting with Error [Savannah] | MISC | savannah.gnu.org | Permissions Required |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 199500 Ubuntu Security Notification for GNU Screen Vulnerability (USN-6198-1)
- 354917 Amazon Linux Security Advisory for screen : ALAS2-2023-2023
- 355465 Amazon Linux Security Advisory for screen : ALAS2023-2023-224
- 502999 Alpine Linux Security Update for screen
- 503000 Alpine Linux Security Update for screen
- 503130 Alpine Linux Security Update for screen
- 505938 Alpine Linux Security Update for screen
- 673171 EulerOS Security Update for screen (EulerOS-SA-2023-2322)
- 673192 EulerOS Security Update for screen (EulerOS-SA-2023-2342)
- 673222 EulerOS Security Update for screen (EulerOS-SA-2023-2367)
- 673254 EulerOS Security Update for screen (EulerOS-SA-2023-2393)
- 673327 EulerOS Security Update for screen (EulerOS-SA-2023-2667)
- 673509 EulerOS Security Update for screen (EulerOS-SA-2023-2709)
- 673573 EulerOS Security Update for screen (EulerOS-SA-2023-3159)
- 907322 Common Base Linux Mariner (CBL-Mariner) Security Update for screen (26216-1)