{"id":"CVE-2023-24626","aliases":["ALPINE-CVE-2023-24626","AZL-26216","BELL-CVE-2023-24626","CLSA-2026-1776934758","CLSA-2026-1776940861","DEBIAN-CVE-2023-24626","EUVD-2023-28637","GHSA-wr4w-95gx-6cfr","MGASA-2024-0057","OESA-2023-1263","UBUNTU-CVE-2023-24626","USN-6198-1","USN-7978-1","openSUSE-SU-2024:13285-1"],"status":"published","title":"socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms...","description":"socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.0054,"percentile":0.45766,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-732"],"published":"2023-04-08T00:00:00Z","modified":"2026-10-26T18:00:35Z","exploits":[{"source":"exploitdb","id":"EDB-51252","title":"GNU screen v4.9.0 - Privilege Escalation","type":"local","platform":"linux","date":"2023-04-05","url":"https://www.exploit-db.com/exploits/51252"}],"fixes":[{"ecosystem":"Alpine:v3.15","package":"screen","fixed_in":["4.8.0-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"screen","fixed_in":["4.9.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"screen","fixed_in":["4.9.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"screen","fixed_in":["4.9.0-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"screen","fixed_in":["4.9.0-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"screen","fixed_in":["4.9.0-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"screen","fixed_in":["4.9.0-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"screen","fixed_in":["4.9.0-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"screen","fixed_in":["4.9.0-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"screen","fixed_in":["4.9.0-r3"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"screen","fixed_in":["4.9.1-1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"screen","fixed_in":["4.1.0-0.27.20120314git3c2946.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"screen","fixed_in":["4.1.0-0.27.20120314git3c2946.el7_9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"screen","fixed_in":["4.9.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"screen","fixed_in":["4.9.1-1"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"screen","fixed_in":["4.9.0-4.1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"screen","fixed_in":["4.8.0-4.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"screen","fixed_in":["4.8.0-6.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"screen","fixed_in":["4.9.0-2.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"screen","fixed_in":["4.9.0-2.oe2203sp1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"screen","fixed_in":["4.1.0~20120320gitdb59704-9ubuntu0.1~esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"screen","fixed_in":["4.3.1-2ubuntu0.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"screen","fixed_in":["4.6.2-1ubuntu1.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"screen","fixed_in":["4.9.0-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"screen","fixed_in":["4.9.1-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.15","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.0-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.0-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.0-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.0-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.0-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.0-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.0-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.0-r3"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.1-1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-0.27.20120314git3c2946.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-0.27.20120314git3c2946.el7_9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.9.0-4","4.9.1-1","4.9.1-1+hurd.1","4.9.1-1+hurd.2","4.9.1-2","4.9.1-3","4.9.1-3.1","5.0.1-1","5.0.1-1.1","5.0.1-1.1+be","5.0.1-2","5.0.1-3","5.0.2-1"]},{"source":"osv","ecosystem":"Debian:13","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.1-1"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.0-4.1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.0-4.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.0-6.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.0-2.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.0-2.oe2203sp1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0~20120320gitdb59704-9ubuntu0.1~esm3"}]}],"versions":["4.0.3-14ubuntu10","4.1.0~20120320gitdb59704-9","4.1.0~20120320gitdb59704-9ubuntu0.1~esm1","4.1.0~20120320gitdb59704-9ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-2ubuntu0.1+esm1"}]}],"versions":["4.3.1-2","4.3.1-2build1","4.3.1-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.2-1ubuntu1.1+esm1"}]}],"versions":["4.6.1-1","4.6.2-1","4.6.2-1ubuntu1","4.6.2-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.6.2-3build1","4.7.0-1","4.8.0-1","4.8.0-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.0-1ubuntu0.1"}]}],"versions":["4.8.0-6","4.8.0-6build1","4.8.0-7","4.9.0-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0~20120320gitdb59704-9ubuntu0.1~esm3"}]}],"versions":["4.0.3-14ubuntu10","4.1.0~20120320gitdb59704-9","4.1.0~20120320gitdb59704-9ubuntu0.1~esm1","4.1.0~20120320gitdb59704-9ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-2ubuntu0.1+esm1"}]}],"versions":["4.3.1-2","4.3.1-2build1","4.3.1-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.2-1ubuntu1.1+esm1"}]}],"versions":["4.6.1-1","4.6.2-1","4.6.2-1ubuntu1","4.6.2-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.0-1ubuntu0.1"}]}],"versions":["4.8.0-6","4.8.0-6build1","4.8.0-7","4.9.0-1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.1-1ubuntu1"}]}],"versions":["4.9.0-4","4.9.1-1","4.9.1-1build1"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"screen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.1-1.1"}]}]}],"products":[{"vendor":"gnu","product":"screen"}],"references":[{"url":"https://savannah.gnu.org/bugs/?63195","tags":["x_transferred","Permissions Required","report"]},{"url":"https://git.savannah.gnu.org/cgit/screen.git/patch/?id=e9ad41bfedb4537a6f0de20f00b27c7739f168f7","tags":["x_transferred","Mailing List","Patch","fix"]},{"url":"https://www.exploit-db.com/exploits/51252","tags":["x_transferred","exploit","Third Party Advisory","VDB Entry","advisory","report"]},{"url":"https://security.netapp.com/advisory/ntap-20250509-0003/","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24626","tags":["web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20250509-0003"},{"url":"https://github.com/advisories/GHSA-wr4w-95gx-6cfr"},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-24626","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-24626","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1776934758.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1776940861.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-24626","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0057.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32074","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6198-1","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1263","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-24626","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-24626","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7978-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-46802","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-46804","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-46805","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-24626","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-24626","description":"socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.","status":"published","published":"2023-04-08T00:00:00Z","modified":"2025-05-09T20:03:31.472Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:35:27.006218Z"}],"euvd":[{"id":"EUVD-2023-28637","description":"socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.","status":"published","published":"2023-04-08T00:00:00Z","modified":"2025-05-09T20:03:31Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T20:32:50.201515Z"}],"ghsa":[{"id":"GHSA-wr4w-95gx-6cfr","title":"socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms...","description":"socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.","status":"published","published":"2023-04-08T06:30:24Z","modified":"2025-05-09T21:32:12Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T15:02:13.681205Z"}],"nvd":[{"id":"CVE-2023-24626","description":"socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.","status":"published","published":"2023-04-08T05:15:07.063Z","modified":"2026-06-17T05:39:41Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:07:53.719171Z"}],"osv":[{"id":"ALPINE-CVE-2023-24626","description":"socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.","status":"published","published":"2023-04-08T05:15:07.063Z","modified":"2026-10-26T17:17:58.612427253Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:27:49.202584Z"},{"id":"AZL-26216","title":"CVE-2023-24626 affecting package screen for versions less than 4.9.1-1","description":"socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.","status":"published","published":"2023-04-08T05:15:07Z","modified":"2026-04-21T04:23:33.35289Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:03.093433Z"},{"id":"BELL-CVE-2023-24626","title":"CVE-2023-24626 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:04.409629Z","modified":"2026-01-26T09:45:41.365874Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"CVE-2023-24626","description":"socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.","status":"published","published":"2023-04-08T05:15:07.063Z","modified":"2026-04-16T04:30:24.40580849Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:30.709518Z"},{"id":"DEBIAN-CVE-2023-24626","description":"socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.","status":"published","published":"2023-04-08T05:15:07.063Z","modified":"2026-10-26T18:00:35.925479611Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:39.369204Z"},{"id":"OESA-2023-1263","title":"screen security update","description":"Screen is a full-screen window manager that multiplexes a physical terminal between several processes,typically interactive shells.\r\n\r\nSecurity Fix(es):\r\n\r\nsocket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.(CVE-2023-24626)","status":"published","published":"2023-04-28T11:05:44Z","modified":"2026-08-18T01:17:40.187017092Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"UBUNTU-CVE-2023-24626","description":"socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.","status":"published","published":"2023-04-08T05:15:00Z","modified":"2026-02-04T03:10:43.741096Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:20.198616Z"},{"id":"CLSA-2026-1776934758","title":"screen: Fix of CVE-2023-24626","description":"- CVE-2023-24626: fix missing signal sending permission check on failed\n  query messages","status":"published","published":"2026-04-25T08:41:36Z","modified":"2026-06-01T00:33:18.361930621Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1776940861","title":"screen: Fix of CVE-2023-24626","description":"- CVE-2023-24626: fix missing signal sending permission check on failed\n  query messages","status":"published","published":"2026-04-23T10:41:05Z","modified":"2026-06-01T00:33:08.191923154Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"MGASA-2024-0057","title":"Updated screen packages fix security vulnerability","description":"The updated package fixes a security vulnerability:\nsocket.c in GNU Screen through 4.9.0, when installed setuid or setgid\n(the default on platforms such as Arch Linux and FreeBSD), allows local\nusers to send a privileged SIGHUP signal to any PID, causing a denial of\nservice or disruption of the target process. (CVE-2023-24626)\n","status":"published","published":"2024-03-13T23:14:37Z","modified":"2026-04-16T04:44:22.074208087Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:13285-1","title":"screen-4.9.1-1.1 on GA media","description":"These are all security issues fixed in the screen-4.9.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:17:25.61438Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"USN-6198-1","title":"screen vulnerability","description":"It was discovered that GNU Screen was not properly checking user\nidentifiers before sending certain signals to target processes. If GNU\nScreen was installed as setuid or setgid, a local attacker could possibly\nuse this issue to cause a denial of service on a target application.\n","status":"published","published":"2023-07-03T12:53:20Z","modified":"2026-06-29T13:50:53.465834747Z","updated_at":"2026-11-02T16:58:16.738762Z"},{"id":"USN-7978-1","title":"screen vulnerabilities","description":"It was discovered that GNU Screen incorrectly handled signals when setuid\nor setgid privileges were being used, which is not the default in Ubuntu.\nA local attacker could use this issue to send privileged signals, possibly\nleading to a denial of service. This issue only affected Ubuntu 22.04 LTS.\n(CVE-2023-24626)\n\nIt was discovered that GNU Screen incorrectly handled PTY permissions. A\nlocal attacker could possibly use this issue to connect to an unauthorized\nscreen session. (CVE-2025-46802)\n\nIt was discovered that GNU Screen incorrectly handled file access when\nsetuid privileges were being used, which is not the default in Ubuntu. A\nlocal attacker could use this issue to deduce information about certain\nfile paths. (CVE-2025-46804)\n\nIt was discovered that GNU Screen incorrectly handled signals when setuid\nprivileges were being used, which is not the default in Ubuntu. A local\nattacker could use this issue to send privileged signals, possibly leading\nto a denial of service. (CVE-2025-46805)","status":"published","published":"2026-01-26T18:47:16Z","modified":"2026-04-27T18:34:31.604583Z","updated_at":"2026-11-02T16:58:22.951676Z"}]}}