PT-2023-19717 · Unknown+6 · Gnu Screen+6

Manuel Andreas · Publicado 2023-02-03 · Atualizado 2026-01-26 · CVE-2023-24626

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GNU Screen versions through 4.9.0

Description The issue allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process. This occurs when GNU Screen is installed setuid or setgid, which is the default on platforms such as Arch Linux and FreeBSD.

Recommendations For GNU Screen versions through 4.9.0, update to a version later than 4.9.0 to resolve the issue.

Exploit

Correção

DoS

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

ALT-PU-2025-5942

AZL-26216

BDU:2025-07702

CVE-2023-24626

MGASA-2024-0057

OESA-2023-1263

OPENSUSE-SU-2024:13285-1

USN-6198-1

USN-7978-1

Produtos afetados

Alt Linux

Astra Linux

Debian

Gnu Screen

Linuxmint

Red Os

Ubuntu

Referências · 38

• 🔥 https://exploit-db.com/exploits/51252 · Exploit
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1020SE47 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-6198-1 · Aviso do Fabricante
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-screen-cve-2023-24626 · Nota
• https://savannah.gnu.org/bugs/?63195 · Nota
• https://suse.com/security/cve/CVE-2023-24626 · Nota
• https://security.alpinelinux.org/vuln/CVE-2023-24626 · Nota
• https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1263 · Nota
• https://t.me/cvenotify/47805 · Publicação no Telegram
• https://git.savannah.gnu.org/cgit/screen.git/patch/?id=e9ad41bfedb4537a6f0de20f00b27c7739f168f7 · Correção
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-24626 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2025-46802 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-24626 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2024:13285-1 · Aviso do Fabricante
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0411SE18 · Aviso do Fabricante