{"id":"CVE-2015-6806","aliases":["DEBIAN-CVE-2015-6806","DLA-305-1","DSA-3352-1","EUVD-2015-6743","GHSA-3cxx-6jhw-pqvg","MGASA-2015-0354","SUSE-SU-2019:1354-1","UBUNTU-CVE-2015-6806","USN-3996-1"],"status":"published","title":"The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion...","description":"The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial of service (stack consumption) via an escape sequence with a large repeat count value.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.04148,"percentile":0.90923,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2015-09-04T00:00:00Z","modified":"2026-09-09T06:47:25Z","fixes":[{"ecosystem":"Debian:12","package":"screen","fixed_in":["4.3.1-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"screen","fixed_in":["4.3.1-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"screen","fixed_in":["4.3.1-2"],"sources":["osv"]},{"ecosystem":"Debian:6.0","package":"screen","fixed_in":["4.0.3-14+deb6u1"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"screen","fixed_in":["4.1.0~20120320gitdb59704-7+deb7u1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"screen","fixed_in":["4.2.1-3+deb8u1"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"screen","fixed_in":["4.0.3-13.1.mga4"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"screen","fixed_in":["4.2.1-3.1.mga5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"screen","fixed_in":["4.0.4-23.3.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"screen","fixed_in":["4.0.4-23.3.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"screen","fixed_in":["4.0.4-23.3.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"screen","fixed_in":["4.0.4-23.3.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"screen","fixed_in":["4.0.4-23.3.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"screen","fixed_in":["4.0.4-23.3.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"screen","fixed_in":["4.1.0~20120320gitdb59704-9ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-2"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-14+deb6u1"}]}],"versions":["4.0.3-14"]},{"source":"osv","ecosystem":"Debian:7","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0~20120320gitdb59704-7+deb7u1"}]}],"versions":["4.1.0~20120320gitdb59704-7"]},{"source":"osv","ecosystem":"Debian:8","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-3+deb8u1"}]}],"versions":["4.2.1-3"]},{"source":"osv","ecosystem":"Mageia:4","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-13.1.mga4"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-3.1.mga5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.4-23.3.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.4-23.3.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.4-23.3.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.4-23.3.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.4-23.3.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.4-23.3.3"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0~20120320gitdb59704-9ubuntu0.1~esm1"}]}],"versions":["4.0.3-14ubuntu10","4.1.0~20120320gitdb59704-9"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0~20120320gitdb59704-9ubuntu0.1~esm1"}]}],"versions":["4.0.3-14ubuntu10","4.1.0~20120320gitdb59704-9"]}],"products":[{"vendor":"gnu","product":"gnu_screen"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2015/09/03/11","tags":["mailing-list","x_refsource_MLIST","x_transferred","Exploit","evidence"]},{"url":"http://www.openwall.com/lists/oss-security/2015/09/01/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","web","report"]},{"url":"http://git.savannah.gnu.org/cgit/screen.git/commit/?id=b7484c224738247b510ed0d268cd577076958f1b","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2015/09/03/4","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://savannah.gnu.org/bugs/?45713","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Vendor Advisory","advisory","evidence"]},{"url":"http://www.debian.org/security/2015/dsa-3352","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"https://usn.ubuntu.com/3996-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00001.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-6806"},{"url":"https://usn.ubuntu.com/3996-1"},{"url":"https://github.com/advisories/GHSA-3cxx-6jhw-pqvg"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-6806","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0354.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=16699","tags":["report"]},{"url":"https://www.debian.org/security/2015/dsa-3352","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191354-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1130831","tags":["report"]},{"url":"https://bugzilla.suse.com/944458","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-6806","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2015-6806","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3996-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-6806","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-6806","description":"The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial of service (stack consumption) via an escape sequence with a large repeat count value.","status":"published","published":"2015-09-28T20:00:00Z","modified":"2024-08-06T07:29:24.823Z","updated_at":"2026-11-02T14:35:42.984856Z"}],"euvd":[{"id":"EUVD-2015-6743","description":"The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial of service (stack consumption) via an escape sequence with a large repeat count value.","status":"published","published":"2015-09-28T20:00:00Z","modified":"2024-08-06T07:29:24Z","updated_at":"2026-11-03T02:21:54.875343Z"}],"ghsa":[{"id":"GHSA-3cxx-6jhw-pqvg","title":"The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion...","description":"The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial of service (stack consumption) via an escape sequence with a large repeat count value.","status":"published","published":"2022-05-14T00:59:41Z","modified":"2025-04-12T12:53:24Z","cwes":["CWE-119"],"updated_at":"2026-11-02T15:01:24.215593Z"}],"nvd":[{"id":"CVE-2015-6806","description":"The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial of service (stack consumption) via an escape sequence with a large repeat count value.","status":"published","published":"2015-09-28T20:59:06.28Z","modified":"2026-06-17T00:31:27.093Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:09.92183Z"}],"osv":[{"id":"CVE-2015-6806","description":"The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial of service (stack consumption) via an escape sequence with a large repeat count value.","status":"published","published":"2015-09-28T20:59:06Z","modified":"2026-04-16T06:21:38.060178046Z","updated_at":"2026-11-02T15:44:00.594921Z"},{"id":"DEBIAN-CVE-2015-6806","description":"The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial of service (stack consumption) via an escape sequence with a large repeat count value.","status":"published","published":"2015-09-28T20:59:06.28Z","modified":"2026-09-09T06:47:25.95847154Z","updated_at":"2026-11-02T15:45:27.04239Z"},{"id":"DLA-305-1","title":"screen - security update","status":"published","published":"2015-09-05T00:00:00Z","modified":"2026-03-09T01:21:06.765909Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-3352-1","title":"screen - security update","status":"published","published":"2015-09-04T00:00:00Z","modified":"2026-03-09T01:23:32.089825Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"MGASA-2015-0354","title":"Updated screen packages fix CVE-2015-6806","description":"Updated screen package fixes security vulnerability:\n\nA vulnerability was found in screen causing a stack overflow which results in\ncrashing the screen server process, resulting in denial of service\n(CVE-2015-6806).\n","status":"published","published":"2015-09-08T17:55:59Z","modified":"2026-04-16T06:24:35.516719278Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"SUSE-SU-2019:1354-1","title":"Security update for screen","description":"This update for screen fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2015-6806: Fixed a stack overflow due to deep recursion (bsc#944458).\n\nNon-security issue fixed:\n\n- Fixed segmentation faults related to altscreen and resizing screen (bsc#1130831).\n","status":"published","published":"2019-05-24T17:05:06Z","modified":"2026-02-04T02:45:51.026419Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"UBUNTU-CVE-2015-6806","description":"The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial of service (stack consumption) via an escape sequence with a large repeat count value.","status":"published","published":"2015-09-28T00:00:00Z","modified":"2026-02-04T02:14:57.689241Z","updated_at":"2026-11-02T15:54:10.737723Z"},{"id":"USN-3996-1","title":"GNU Screen vulnerability","description":"Kuang-che Wu discovered that GNU Screen improperly handled certain input. An \nattacker could use this issue to cause GNU Screen to crash, resulting in a\ndenial of service or the execution of arbitrary code.\n","status":"published","published":"2019-05-29T13:55:13Z","modified":"2026-02-10T04:41:33Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}