PT-2020-20614 · Gnu+1 · Gnu Screen+1

Pippin · Published 2020-02-24 · Updated 2022-01-01 · CVE-2020-9366

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GNU Screen versions prior to 4.8.0

Description A buffer overflow issue was discovered in the way GNU Screen handles the special escape OSC 49. This could be triggered by specially crafted output or a special program, potentially corrupting memory, crashing Screen, or having other unspecified impacts.

Recommendations For GNU Screen versions prior to 4.8.0, update to version 4.8.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the OSC 49 escape sequence until a patch is available.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ALT-PU-2021-1104

ALT-PU-2021-1132

ALT-PU-2021-2142

CVE-2020-9366

Affected Products

Alt Linux

Gnu Screen

References · 11

• https://osv.dev/vulnerability/ALPINE-CVE-2020-9366 · Vendor Advisory
• https://lists.gnu.org/archive/html/screen-devel/2020-02/msg00007.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-9366 · Security Note
• https://openwall.com/lists/oss-security/2020/02/06/3 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-9366 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-9366 · Vendor Advisory
• https://security.gentoo.org/glsa/202003-62 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-9366 · Vendor Advisory
• https://security.alpinelinux.org/vuln/CVE-2020-9366 · Note
• https://t.me/cvenotify/1175 · Telegram Post
• http://openwall.com/lists/oss-security/2020/02/25/1 · Note