Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-24626

Опубликовано: 08 апр. 2023
Источник: nvd
CVSS3: 6.5
EPSS Низкий

Описание

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:gnu:screen:*:*:*:*:*:*:*:*
Версия до 4.9.0 (включая)

EPSS

Процентиль: 15%
0.00048
Низкий

6.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo
CWE-732

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 3 года назад

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.

CVSS3: 6.5
redhat
почти 3 года назад

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.

CVSS3: 6.5
msrc
больше 2 лет назад

socket.c in GNU Screen through 4.9.0 when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD) allows local users to send a privileged SIGHUP signal to any PID causing a denial of service or disruption of the target process.

CVSS3: 6.5
debian
почти 3 года назад

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid ...

CVSS3: 7.8
github
почти 3 года назад

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.

EPSS

Процентиль: 15%
0.00048
Низкий

6.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo
CWE-732