Every CVE Search/ Get API key

CVE-2023-24626

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms...

6.5 MediumPublic exploitFix available

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.54%Up 0.5 points since Apr 8, 2023
90%50%10%1%

What each source reports

NVD Score used 6.5

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.

Record
CVE-2023-24626
CVSS 3.1
6.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Weakness
CWE-732
Updated
2026-11-02
CVE List 6.5

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.

Record
CVE-2023-24626
CVSS 3.1
6.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Weakness
CWE-732
Updated
2026-11-02
EUVDEUVD-2023-28637 6.5

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.

Record
EUVD-2023-28637
CVSS 3.1
6.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-wr4w-95gx-6cfr 7.8

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms...

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.

Record
GHSA-wr4w-95gx-6cfr
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-732
Updated
2026-11-02
OSVALPINE-CVE-2023-24626 6.5

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.

Record
ALPINE-CVE-2023-24626
CVSS 3.1
6.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-26216 6.5

CVE-2023-24626 affecting package screen for versions less than 4.9.1-1

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.

Record
AZL-26216
CVSS 3.1
6.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
Show 11 moreShow less
OSVBELL-CVE-2023-24626 6.5

CVE-2023-24626 does not affect BellSoft software

Record
BELL-CVE-2023-24626
CVSS 3.1
6.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSV 6.5

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.

Record
CVE-2023-24626
CVSS 3.1
6.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2023-24626 6.5

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.

Record
DEBIAN-CVE-2023-24626
CVSS 3.1
6.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2023-1263 6.5

screen security update

Screen is a full-screen window manager that multiplexes a physical terminal between several processes,typically interactive shells.

Security Fix(es):

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.(CVE-2023-24626)

Record
OESA-2023-1263
CVSS 3.1
6.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-24626 6.5

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.

Record
UBUNTU-CVE-2023-24626
CVSS 3.1
6.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVCLSA-2026-1776934758 No score

screen: Fix of CVE-2023-24626

  • CVE-2023-24626: fix missing signal sending permission check on failed query messages
Record
CLSA-2026-1776934758
Updated
2026-11-02
OSVCLSA-2026-1776940861 No score

screen: Fix of CVE-2023-24626

  • CVE-2023-24626: fix missing signal sending permission check on failed query messages
Record
CLSA-2026-1776940861
Updated
2026-11-02
OSVMGASA-2024-0057 No score

Updated screen packages fix security vulnerability

The updated package fixes a security vulnerability: socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process. (CVE-2023-24626)

Record
MGASA-2024-0057
Updated
2026-11-02
OSVopenSUSE-SU-2024:13285-1 No score

screen-4.9.1-1.1 on GA media

These are all security issues fixed in the screen-4.9.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13285-1
Updated
2026-11-02
OSVUSN-6198-1 No score

screen vulnerability

It was discovered that GNU Screen was not properly checking user identifiers before sending certain signals to target processes. If GNU Screen was installed as setuid or setgid, a local attacker could possibly use this issue to cause a denial of service on a target application.

Record
USN-6198-1
Updated
2026-11-02
OSVUSN-7978-1 No score

screen vulnerabilities

It was discovered that GNU Screen incorrectly handled signals when setuid or setgid privileges were being used, which is not the default in Ubuntu. A local attacker could use this issue to send privileged signals, possibly leading to a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2023-24626)

It was discovered that GNU Screen incorrectly handled PTY permissions. A local attacker could possibly use this issue to connect to an unauthorized screen session. (CVE-2025-46802)

It was discovered that GNU Screen incorrectly handled file access when setuid privileges were being used, which is not the default in Ubuntu. A local attacker could use this issue to deduce information about certain file paths. (CVE-2025-46804)

It was discovered that GNU Screen incorrectly handled signals when setuid privileges were being used, which is not the default in Ubuntu. A local attacker could use this issue to send privileged signals, possibly leading to a denial of service. (CVE-2025-46805)

Record
USN-7978-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
screen
Alpine:v3.15
 before 4.8.0-r6
4.8.0-r6
screen
Alpine:v3.16
 before 4.9.0-r1
4.9.0-r1
screen
Alpine:v3.17
 before 4.9.0-r1
4.9.0-r1
screen
Alpine:v3.18
 before 4.9.0-r3
4.9.0-r3
screen
Alpine:v3.19
 before 4.9.0-r3
4.9.0-r3
screen
Alpine:v3.20
 before 4.9.0-r3
4.9.0-r3
screen
Alpine:v3.21
 before 4.9.0-r3
4.9.0-r3
screen
Alpine:v3.22
 before 4.9.0-r3
4.9.0-r3
screen
Alpine:v3.23
 before 4.9.0-r3
4.9.0-r3
screen
Alpine:v3.24
 before 4.9.0-r3
4.9.0-r3
Show 19 moreShow less
Affected packages
PackageAffectedFixed
screen
Azure Linux:2
 before 4.9.1-1
4.9.1-1
screen
TuxCare:CentOS:7
 before 4.1.0-0.27.20120314git3c2946.el7_9.tuxcare.els1
4.1.0-0.27.20120314git3c2946.el7_9.tuxcare.els1
screen
TuxCare:OracleLinux:7
 before 4.1.0-0.27.20120314git3c2946.el7_9.tuxcare.els1
4.1.0-0.27.20120314git3c2946.el7_9.tuxcare.els1
screen
Debian:12
 All versions, plus listed versions
4.9.0-44.9.1-14.9.1-1+hurd.14.9.1-1+hurd.24.9.1-2
Show 8 moreShow less
4.9.1-34.9.1-3.15.0.1-15.0.1-1.15.0.1-1.1+be5.0.1-25.0.1-35.0.2-1
 None known
screen
Debian:13
 before 4.9.1-1
4.9.1-1
screen
Debian:14
 before 4.9.1-1
4.9.1-1
screen
Mageia:9
 before 4.9.0-4.1.mga9
4.9.0-4.1.mga9
screen
openEuler:20.03-LTS-SP1
 before 4.8.0-4.oe1
4.8.0-4.oe1
screen
openEuler:20.03-LTS-SP3
 before 4.8.0-6.oe1
4.8.0-6.oe1
screen
openEuler:22.03-LTS
 before 4.9.0-2.oe2203sp1
4.9.0-2.oe2203sp1
screen
openEuler:22.03-LTS-SP1
 before 4.9.0-2.oe2203sp1
4.9.0-2.oe2203sp1
screen
Ubuntu:Pro:14.04:LTS
 before 4.1.0~20120320gitdb59704-9ubuntu0.1~esm3, plus listed versions
4.0.3-14ubuntu104.1.0~20120320gitdb59704-94.1.0~20120320gitdb59704-9ubuntu0.1~esm14.1.0~20120320gitdb59704-9ubuntu0.1~esm2
4.1.0~20120320gitdb59704-9ubuntu0.1~esm3
screen
Ubuntu:Pro:16.04:LTS
 before 4.3.1-2ubuntu0.1+esm1, plus listed versions
4.3.1-24.3.1-2build14.3.1-2ubuntu0.1
4.3.1-2ubuntu0.1+esm1
screen
Ubuntu:Pro:18.04:LTS
 before 4.6.2-1ubuntu1.1+esm1, plus listed versions
4.6.1-14.6.2-14.6.2-1ubuntu14.6.2-1ubuntu1.1
4.6.2-1ubuntu1.1+esm1
screen
Ubuntu:20.04:LTS
 All versions, plus listed versions
4.6.2-3build14.7.0-14.8.0-14.8.0-1ubuntu0.1
 None known
screen
Ubuntu:22.04:LTS
 before 4.9.0-1ubuntu0.1, plus listed versions
4.8.0-64.8.0-6build14.8.0-74.9.0-1
4.9.0-1ubuntu0.1
screen
Ubuntu:22.04:LTS
From an advisory covering 4 CVEs
 before 4.9.0-1ubuntu0.1, plus listed versions
4.8.0-64.8.0-6build14.8.0-74.9.0-1
4.9.0-1ubuntu0.1
screen
Ubuntu:24.04:LTS
From an advisory covering 4 CVEs
 before 4.9.1-1ubuntu1, plus listed versions
4.9.0-44.9.1-14.9.1-1build1
4.9.1-1ubuntu1
screen
openSUSE:Tumbleweed
 before 4.9.1-1.1
4.9.1-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBGNU screen v4.9.0 - Privilege Escalation2023-04-05

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-24626 is a medium vulnerability (CVSS 6.5) in Gnu Screen, published April 8, 2023. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.54%, the 45th percentile. Fixed in screen 4.8.0-r6.

References

Show 16 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open