Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2023-24626

Опубликовано: 08 апр. 2023
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS3: 6.5

Описание

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

not-affected

4.9.1-1build1
esm-infra-legacy/trusty

released

4.1.0~20120320gitdb59704-9ubuntu0.1~esm3
esm-infra/bionic

released

4.6.2-1ubuntu1.1+esm1
esm-infra/focal

needs-triage

esm-infra/xenial

released

4.3.1-2ubuntu0.1+esm1
focal

ignored

end of standard support, was needs-triage
jammy

needs-triage

kinetic

ignored

end of life, was needs-triage
lunar

ignored

end of life, was needs-triage

Показывать по

EPSS

Процентиль: 15%
0.00048
Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
redhat
почти 3 года назад

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.

CVSS3: 6.5
nvd
почти 3 года назад

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.

CVSS3: 6.5
msrc
больше 2 лет назад

socket.c in GNU Screen through 4.9.0 when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD) allows local users to send a privileged SIGHUP signal to any PID causing a denial of service or disruption of the target process.

CVSS3: 6.5
debian
почти 3 года назад

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid ...

CVSS3: 7.8
github
почти 3 года назад

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.

EPSS

Процентиль: 15%
0.00048
Низкий

6.5 Medium

CVSS3