Multiple vulnerabilities have been found in GNU screen.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-misc/screen | * | < 4.9.1-r2 | >= 4.9.1-r2 |
GNU screen is a full-screen window manager that multiplexes a physical terminal between several processes, typically interactive shells.
Multiple vulnerabilities have been discovered in GNU screen. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All GNU screen users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-misc/screen-4.9.1-r2"
A vulnerability in GNU screen may allow a remote attacker to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-misc/screen | * | < 4.8.0-r2 | >= 4.8.0-r2 |
GNU Screen is a full-screen window manager that multiplexes a physical terminal between several processes, typically interactive shells.
It was discovered that GNU screen did not properly handle certain UTF-8 character sequences.
A remote attacker could entice a user to run a program where attacker controls the output inside a GNU screen session, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition.
This vulnerability can be mitigated by disabling UTF-8 processing in .screenrc.
All GNU screen users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-misc/screen-4.8.0-r2"
A buffer overflow in GNU Screen might allow remote attackers to corrupt memory.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-misc/screen | * | < 4.8.0 | >= 4.8.0 |
GNU Screen is a full-screen window manager that multiplexes a physical terminal between several processes, typically interactive shells.
A buffer overflow was found in the way GNU Screen treated the special escape OSC 49.
A remote attacker, by writing a specially crafted string of characters to a GNU Screen window, could possibly corrupt memory or have other unspecified impact.
There is no known workaround at this time.
All GNU Screen users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-misc/screen-4.8.0"
Screen contains an error in its UTF-8 character handling code that would allow a remote Denial of Service or possibly the remote execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-misc/screen | * | < 4.0.3 | >= 4.0.3 |
Screen is a full-screen window manager that multiplexes a physical terminal between several processes, typically interactive shells.
cstone and Richard Felker discovered a flaw in Screen's UTF-8 combining character handling.
The vulnerability can be exploited by writing a special string of characters to a Screen window. A remote attacker could cause a Denial of Service or possibly execute arbitrary code with the privileges of the user running Screen through a program being run inside a Screen session, such as an IRC client or a mail client.
There is no known workaround at this time.
All Screen users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-misc/screen-4.0.3"