CVE-2023-24626

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Weakness enumeration

CWE-732

Affected software

No affected versions have been published.

Timeline

Published
Apr 8, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-24634.3Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to hide the coCVE-2023-24644.3Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed an attacker who convinced a user to installCVE-2023-246419.8Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the sid parameter at /php-jms/updateview.php.CVE-2023-246429.8Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the sid parameter at /php-jms/updateTxtview.php.CVE-2023-246439.8Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the sid parameter at /php-jms/updateBlankTxtview.CVE-2023-246469.8An arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering System v2.0 allows attackers to execute arbitraCVE-2023-246477.5Food Ordering System v2.0 was discovered to contain a SQL injection vulnerability via the email parameter.CVE-2023-246486.1Zstore v6.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /index.php.CVE-2023-24654.3Inappropriate implementation in CORS in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to leak cross-origin data via a craftCVE-2023-246515.4Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter on the reCVE-2023-246528.8Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the Description parameter unCVE-2023-246538.8Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the oldpass parameter under
CVE-2023-24626: Medium severity, CVSS 6.5 | Vulnix