{"id":"CVE-2017-5618","aliases":["ALPINE-CVE-2017-5618","DEBIAN-CVE-2017-5618","EUVD-2017-14715","GHSA-qj7p-fvh6-8gg6","openSUSE-SU-2024:11374-1"],"status":"published","title":"GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root...","description":"GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01087,"percentile":0.65544,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-863"],"published":"2017-03-20T16:00:00Z","modified":"2026-09-01T20:03:48Z","fixes":[{"ecosystem":"Alpine:v3.5","package":"screen","fixed_in":["4.5.1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"screen","fixed_in":["4.5.0-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"screen","fixed_in":["4.5.0-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"screen","fixed_in":["4.5.0-3"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"screen","fixed_in":["4.8.0-3.17"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.5","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-3"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.0-3.17"}]}]}],"products":[{"vendor":"gnu","product":"screen"}],"references":[{"url":"http://git.savannah.gnu.org/cgit/screen.git/tree/src/ChangeLog?h=v.4.5.1","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Third Party Advisory","advisory"]},{"url":"http://savannah.gnu.org/bugs/?50142","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2017/01/29/3","tags":["mailing-list","x_refsource_MLIST","x_transferred","Exploit","Mailing List","Third Party Advisory","evidence"]},{"url":"http://git.savannah.gnu.org/cgit/screen.git/patch/?id=1c6d2817926d30c9a7a97d99af7ac5de4a5845b8","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"http://www.securityfocus.com/bid/95873","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://lists.gnu.org/archive/html/screen-devel/2017-01/msg00025.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Exploit","Third Party Advisory","evidence"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5618"},{"url":"https://github.com/advisories/GHSA-qj7p-fvh6-8gg6"},{"url":"https://security.alpinelinux.org/vuln/CVE-2017-5618","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-5618","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5618","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-5618","description":"GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions.","status":"published","published":"2017-03-20T16:00:00Z","modified":"2024-08-05T15:04:15.333Z","updated_at":"2026-11-02T14:33:12.599234Z"}],"euvd":[{"id":"EUVD-2017-14715","description":"GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions.","status":"published","published":"2017-03-20T16:00:00Z","modified":"2024-08-05T15:04:15Z","updated_at":"2026-11-03T02:39:14.545495Z"}],"ghsa":[{"id":"GHSA-qj7p-fvh6-8gg6","title":"GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root...","description":"GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions.","status":"published","published":"2022-05-13T01:18:22Z","modified":"2023-02-01T05:05:19Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:50:14.297796Z"}],"nvd":[{"id":"CVE-2017-5618","description":"GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions.","status":"published","published":"2017-03-20T16:59:02.077Z","modified":"2026-06-17T01:20:51.537Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:03:44.275273Z"}],"osv":[{"id":"ALPINE-CVE-2017-5618","description":"GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions.","status":"published","published":"2017-03-20T16:59:02.077Z","modified":"2026-06-15T18:24:59.390019544Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:46.716249Z"},{"id":"CVE-2017-5618","description":"GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions.","status":"published","published":"2017-03-20T16:59:02.077Z","modified":"2026-03-15T22:17:33.105937Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:06.029968Z"},{"id":"DEBIAN-CVE-2017-5618","description":"GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions.","status":"published","published":"2017-03-20T16:59:02.077Z","modified":"2026-09-01T20:03:48.588758558Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:29.412243Z"},{"id":"openSUSE-SU-2024:11374-1","title":"screen-4.8.0-3.17 on GA media","description":"These are all security issues fixed in the screen-4.8.0-3.17 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:59:26.210641Z","updated_at":"2026-11-02T16:58:35.195147Z"}]}}