Skip to content
CVE PROGRAM SOURCE RECORD5.7 Medium

CVE-2025-46805

Screen has a TOCTOU race potentially allowing to send SIGHUP, SIGCONT to privileged processes when installed setuid-root

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
suse

Description

Screen version 5.0.0 and older version 4 releases have a TOCTOU race potentially allowing to send SIGHUP, SIGCONT to privileged processes when installed setuid-root.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

screen

Default version status: unaffected

  • 5.0. to ≤ 5.0.0affected
  • ? to ≤ 4.9.1affected

References