Описание
Security update for screen
This update for screen fixes the following issues:
Security issue fixed:
- CVE-2015-6806: Fixed a stack overflow due to deep recursion (bsc#944458).
Non-security issue fixed:
- Fixed segmentation faults related to altscreen and resizing screen (bsc#1130831).
This update was imported from the SUSE:SLE-12-SP2:Update update project.
Список пакетов
openSUSE Leap 42.3
screen-4.0.4-10.3.1
Ссылки
- E-Mail link for openSUSE-SU-2019:1485-1
- SUSE Security Ratings
Описание
The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial of service (stack consumption) via an escape sequence with a large repeat count value.
Затронутые продукты
openSUSE Leap 42.3:screen-4.0.4-10.3.1
Ссылки
- CVE-2015-6806
- SUSE Bug 944458