VDB
GCVE-110-MAGEIA-2024-57
GCVE-110-MAGEIA-2024-57
Advisory Published
The updated package fixes a security vulnerability:
socket.c in GNU Screen through 4.9.0, when installed setuid or setgid
(the default on platforms such as Arch Linux and FreeBSD), allows local
users to send a privileged SIGHUP signal to any PID, causing a denial of
service or disruption of the target process. (CVE-2023-24626)
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | socat | 0 (affected), 1.8.0.0-1.1.mga9 (unaffected) | — |
| Mageia | screen | 0 (affected), 4.9.0-4.1.mga9 (unaffected), 0 (affected), 4.9.0-4.1.mga9 (unaffected) | — |
References
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.