CVE-2023-24626

MEDIUM 6.5EPSS 0.5%

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.

CVSS v3.1: 6.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
CVSS v3.1: 6.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
EPSS: 0.54% chance of exploitation in the next 30 days, 43th percentile
Published: 2023-04-08
Updated: 2025-05-09

ExploitDB entries (1)

https://www.exploit-db.com/exploits/51252

References

Related