Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-24626

Опубликовано: 08 апр. 2023
Источник: nvd
CVSS3: 6.5
EPSS Низкий

Описание

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:gnu:screen:*:*:*:*:*:*:*:*
Версия до 4.9.0 (включая)

EPSS

Процентиль: 42%
0.0054
Низкий

6.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo
CWE-732

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 3 лет назад

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.

CVSS3: 6.5
redhat
больше 3 лет назад

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.

CVSS3: 6.5
msrc
больше 3 лет назад

socket.c in GNU Screen through 4.9.0 when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD) allows local users to send a privileged SIGHUP signal to any PID causing a denial of service or disruption of the target process.

CVSS3: 6.5
debian
больше 3 лет назад

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid ...

CVSS3: 7.8
github
больше 3 лет назад

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.

EPSS

Процентиль: 42%
0.0054
Низкий

6.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo
CWE-732