CVE-2023-24626

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Weakness enumeration

CWE-732

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://git.savannah.gnu.org/cgit/screen.git/patch/?id=e9ad41bfedb4537a6f0de20f00b27c7739f168f7Mailing List, Patch
https://savannah.gnu.org/bugs/?63195Permissions Required
https://www.exploit-db.com/exploits/51252Third Party Advisory, VDB Entry
https://git.savannah.gnu.org/cgit/screen.git/patch/?id=e9ad41bfedb4537a6f0de20f00b27c7739f168f7Mailing List, Patch
https://savannah.gnu.org/bugs/?63195Permissions Required
https://security.netapp.com/advisory/ntap-20250509-0003/
https://www.exploit-db.com/exploits/51252Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/51252Third Party Advisory, VDB Entry

Timeline

Published: Apr 8, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023