Описание
GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| screen | fixed | 4.5.0-3 | package | |
| screen | not-affected | stretch | package | |
| screen | not-affected | jessie | package | |
| screen | not-affected | wheezy | package |
Примечания
https://lists.gnu.org/archive/html/screen-devel/2017-01/msg00025.html
https://savannah.gnu.org/bugs/?50142
Introduced in (screen-v4): http://git.savannah.gnu.org/cgit/screen.git/commit/?h=screen-v4&id=5460f5d28c01a9a58e021eb1dffef2965e629d58
Introduced in (master): http://git.savannah.gnu.org/cgit/screen.git/commit/?id=c575c40c9bd7653470639da32e06faed0a9b2ec4
https://www.openwall.com/lists/oss-security/2017/01/24/10
EPSS
Связанные уязвимости
GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions.
GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions.
GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions.
GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions.
ALT-PU-2017-1266: package `screen` update to version 4.5.1-alt1
EPSS