GNU Screen vulnerabilities

2 CVEs affecting GNU Screen, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-6806, published 2015-09-28.

More from GNU.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-6806, published 2015-09-28. Medium severity, CVSS 5.0. EPSS: 4.1% chance of exploitation in the next 30 days. The MScrollV function in ansi.c in GNU screen 4.3.1 and earlier does not properly limit recursion, which allows remote attackers to cause a denial of service (stack consumption) via an escape…
• CVE-2009-1215, published 2009-04-01. Low severity, CVSS 1.9. EPSS: 0.2% chance of exploitation in the next 30 days. Race condition in GNU screen 4.0.3 allows local users to create or overwrite arbitrary files via a symlink attack on the /tmp/screen-exchange temporary file.