Most recent entries from all

bdu:2025-11401

BELL-CVE-2025-46804

Affected: Alpaquita:23: screen, Alpaquita:stream: screen

cnvd-2025-11924

EUVD-2026-241502

fkie_cve-2025-46804

A minor information leak when running Screen with setuid-root privileges allows unprivileged users to deduce information about a path that would otherwise not be available.

Affected are older Screen versions, as well as version 5.0.0.

GHSA-pmh6-rrrw-xvhh

A minor information leak when running Screen with setuid-root privileges allosw unprivileged users to deduce information about a path that would otherwise not be available.

Affected are older Screen versions, as well as version 5.0.0.

OESA-2025-1579 — screen security update

Affected: openEuler:22.03-LTS-SP4: screen, openEuler:24.03-LTS: screen, openEuler:24.03-LTS-SP1: screen, openEuler:20.03-LTS-SP4: screen, openEuler:22.03-LTS-SP3: screen

Screen is a full-screen window manager that multiplexes a physical terminal between several processes,typically interactive shells. Security Fix(es):

For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session.(CVE-2025-46802)

A minor information leak when running Screen with setuid-root privileges allows unprivileged users to deduce information about a path that would otherwise not be available.

Affected are older Screen versions, as well as version 5.0.0.(CVE-2025-46804)

Screen version 5.0.0 and older version 4 releases have a TOCTOU race potentially allowing to send SIGHUP, SIGCONT to privileged processes when installed setuid-root.(CVE-2025-46805)

UBUNTU-CVE-2025-46804

Affected: Ubuntu:Pro:14.04:LTS: screen, Ubuntu:Pro:16.04:LTS: screen, Ubuntu:Pro:18.04:LTS: screen, Ubuntu:20.04:LTS: screen, Ubuntu:22.04:LTS: screen, Ubuntu:24.04:LTS: screen

A minor information leak when running Screen with setuid-root privileges allows unprivileged users to deduce information about a path that would otherwise not be available. Affected are older Screen versions, as well as version 5.0.0.

WID-SEC-W-2025-1034 — screen: Mehrere Schwachstellen

Ein lokaler Angreifer kann mehrere Schwachstellen in screen ausnutzen, um seine Privilegien zu erhöhen, Daten zu manipulieren oder Informationen offenzulegen.