CVE-2020-9366

CRITICAL

GNU Screen < 4.8.0 - Out-of-bounds Write via OSC 49 Escape Sequence

Title source: llm
STIX 2.1

Description

A buffer overflow was found in the way GNU Screen before 4.8.0 treated the special escape OSC 49. Specially crafted output, or a special program, could corrupt memory and crash Screen or possibly have unspecified other impact.

References (4)

Core 4
Core References
Mailing List, Patch, Release Notes x_refsource_misc
https://www.openwall.com/lists/oss-security/2020/02/06/3
Mailing List, Patch, Release Notes, Vendor Advisory x_refsource_misc
https://lists.gnu.org/archive/html/screen-devel/2020-02/msg00007.html
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2020/02/25/1
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/202003-62

Scores

CVSS v3 9.8
EPSS 0.0073
EPSS Percentile 72.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (1)
gnu/screen < 4.8.0
Published Feb 24, 2020
Tracked Since Feb 18, 2026