CVE-2017-5618
GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root...
CVE-2017-5618 is a high vulnerability (CVSS 7.8) in Gnu Screen, published March 20, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.09%, the 65th percentile. Fixed in screen 4.5.1.
GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions.
- Record
CVE-2017-5618- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-863
- Updated
- 2026-11-02
CVE List No score
GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions.
- Record
CVE-2017-5618- Updated
- 2026-11-02
EUVDEUVD-2017-14715 No score
GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions.
- Record
EUVD-2017-14715- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qj7p-fvh6-8gg6
GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root...
GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions.
- Record
GHSA-qj7p-fvh6-8gg6- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-863
- Updated
- 2026-11-02
OSVALPINE-CVE-2017-5618
GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions.
- Record
ALPINE-CVE-2017-5618- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions.
- Record
CVE-2017-5618- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2017-5618
GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions.
- Record
DEBIAN-CVE-2017-5618- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11374-1 No score
screen-4.8.0-3.17 on GA media
These are all security issues fixed in the screen-4.8.0-3.17 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11374-1- Updated
- 2026-11-02
Affected products
Affected packages
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
git.savannah.gnu.org/cgit/screen.git/tree/src/ChangeLog?h=v.4.5.1
savannah.gnu.org/bugs?50142
openwall.com/lists/oss-security/2017/01/29/3
securityfocus.com/bid/95873
lists.gnu.org/archive/html/screen-devel/2017-01/msg00025.html